deepseekplugins

DeepSeek Harness plugin

dsh-license-guard

依赖许可证合规：扫描 node_modules 许可证、归一化 SPDX 标识、按宽松/弱传染/强传染分类，并做发布前合规校验

Development & Runtime
Jump to install

Source facts

Repository
uckkk/dsh-license-guard
Latest update
Aug 19, 2026
Category
Development & Runtime
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/uckkk/dsh-license-guard
Plugin: dsh-license-guard
Author: uckkk

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-license-guard · 依赖许可证合规

扫描项目 node_modules 中每个依赖的许可证，归一化为 SPDX 标识，按「宽松 / 弱传染 / 强传染 / 未知 / 未授权」分类，并支持发布前的允许/禁止策略校验。纯 Node 实现，无网络、无外部服务。

提供的工具

工具作用
license_scan扫描全部依赖许可证，分类汇总
license_check按允许/禁止策略校验，返回违规依赖

安装

dsh plugin add dsh-license-guard

安装后在 profile 的 package.json 的 dsh.profile.bundles 中加入 "dsh-license-guard"。

用法示例

看看这个项目依赖的许可证构成
→ 调用 license_scan(root="/workspace")

发布前做一次合规门禁
→ 调用 license_check(root="/workspace", deny=["AGPL-3.0"])

默认策略

  • 默认允许：MIT、Apache-2.0、ISC、BSD、0BSD、Zlib、Unlicense、CC0-1.0 等宽松许可证。
  • 默认禁止：GPL-3.0、AGPL-3.0、SSPL-1.0、GPL-2.0 等强传染许可证。
  • 未知 / 未授权许可证默认计入违规（可用 includeUnknown: false 关闭）。

说明

  • 许可证识别基于各依赖 package.json 的 license / licenses 字段，识别不到的会标记为「未知」。
  • 这属于启发式合规筛查，正式商用/发布前请以法律复核为准。

安装

dsh plugin add github:uckkk/dsh-license-guard

> 安装即在本机运行第三方代码，请自行审阅源码。

安装

dsh plugin add github:uckkk/dsh-license-guard

使用

安装后在会话中调用该插件注册的工具即可。

许可

MIT

> 安装即在本机运行第三方代码，请自行审阅源码。

Back to searchOpen GitHub repository

More related plugins

View category