dsh-dependency-audit: Dependency Security Audit: OSV.dev Vulnerability Scanning + Outdated npm Dependency Detection
The `dsh-dependency-audit` plugin for DeepSeek Harness (DSH) is designed to address the dependency security and version maintenance pain points in agent development. Built on pure Node.js, it queries OSV.dev and the npm registry to provide dependency auditing capabilities. It supports batch scanning of known vulnerabilities (including IDs, severity levels, and fixed versions) and detection of outdated dependencies. Users must enable the plugin in `package.json` and can then call functions such as `audit_vulnerabilities` and `audit_outdated` to check the project's security status. Together with license compliance and secret scanning plugins, it forms a three-part security suite; however, be aware of the security risks involved in running third-party code locally.
Read More