Articles tagged "dsh-license-guard"

dsh-license-guard：依赖树与项目自身的开源许可合规检查

2026-10-21 DeepSeek Harness plugin DeepSeek DSH dsh-license-guard admin-security 开源许可合规

feely0208 的 DSH 插件 dsh-license-guard（@deepwhale-cn/dsh-license-guard）在发版、开源或审计前扫描当前目录依赖树与项目基础文件，按 5 条规则标出 GPL/AGPL 传染、许可未知、缺 LICENSE 及 package.json 缺 license 等风险。支持 dsh plugin --profile web 安装或 npx 纯 CLI，可输出 HTML 报告并用退出码接入 CI。不校验许可证声明真伪，不覆盖 SSPL/BUSL 等非 SPDX 自定义协议。

dsh-license-guard: Dependency License Compliance Scanning

2026-09-21 DeepSeek Harness plugin DeepSeek DSH plugin dsh-license-guard License Compliance Open source security

`dsh-license-guard` is a DeepSeek Harness plugin designed to address dependency license compliance issues. It scans `node_modules`, normalizes licenses to the SPDX format, and classifies them by category. Users can run a scan to review the license composition or, before publishing, use `license_check` to specify prohibited licenses (such as AGPL-3.0) and block them. The plugin includes a built-in default policy that permits permissive licenses by default and disallows strong copyleft licenses. As a pure Node.js implementation, it performs heuristic screening; legal review and appropriate runtime permissions should be considered.