Introduction

The DSH plugin ecosystem emphasizes “everything is a plugin”. With a large number of plugins, developers often need a single place to complete discovery, filtering, trust judgment, and installation confirmation. Luaphes/dsh-plugins-market is a plugin marketplace for DeepSeek Harness (DSH): it scrapes candidate repositories from the official dsh-plugin topic, performs noise filtering, trust badges, sorting, searching, and a one-click installation panel. This article introduces it as a community directory tool; it is not an official app store and has no official affiliation with DeepSeek / High-Flyer.

What is it

Luaphes/dsh-plugins-market is maintained by Luaphes, status beta but installable. License is MIT. It is installed as a persistent npm bundle to the DSH profile and retained after restarting the Web UI. Once enabled, a new “Discover plugins” tab appears under Settings -> Plugins, used to browse, filter, and install DSH plugins.

Core Features

Discovery and Noise Filtering

  • Sniffs the official dsh-plugin topic, takes the top ~500 repositories by stars.
  • Filters topic-squatting noise.
  • First load takes about 30 seconds, then uses a 10-minute memory cache.

Trust Badges and Sorting/Searching

  • Displays “Curated” (human-curated) badges.
  • Displays community compatibility determination: Compatible / Needs adaptation / Deleted / Watched.
  • Sorts by total stars, recent growth, newest, and recently pushed; supports ascending/descending toggle, instant search, and language filtering.
  • When snapshot data covers a repository, the card displays ★ N (+M) daily star growth.

Installation Validation and Execution

  • Validates the target repository’s package.json for the dsh.bundle.patch declaration before installation; non-bundle repositories not declaring this are rejected.
  • When installing other plugins, the panel displays specific commands and gives a allowBuilds security warning; execution occurs after confirmation.
  • This market plugin itself has zero builds, no install scripts, and does not trigger the allowBuilds prompt.
  • It has zero LLM, zero backend, zero user quota, using only rules and public APIs, such as the GitHub Search API.

Installation and Enablement

First, execute the installation command:

dsh plugin --profile web add github:Luaphes/dsh-plugins-market

Then restart the Web UI. After the steps above, a “Discover plugins” tab will appear under Settings -> Plugins.

The documentation also lists an npm installation syntax:

dsh plugin --profile web add dsh-plugins-market

The documentation has not confirmed if the npm package is actually released, so the GitHub installation command is the standard for daily use.

Typical Usage

  1. Open the Discover plugins tab, use instant search, sorting, and language filtering to find candidate repositories.
  2. Click Install.
  3. The panel first checks if the target repository’s package.json declares dsh.bundle.patch; if not, it rejects the installation.
  4. After the check passes, the panel displays the installation command and the allowBuilds security warning.
  5. After confirmation, execute a command similar to:
dsh plugin --profile <p> add github:owner/repo

Here <p> is the profile, and owner/repo is the target plugin repository.

  1. After installation, restart the Web UI and verify availability in the plugin list.

Use Cases and Notes

Suitable for users who frequently browse DSH plugins, want to filter by stars and recent changes, and wish to see commands and warnings before installation.

Notes:

  • Status is beta, but installable.
  • Plugins run with the current dsh process permissions. Check source code, package.json, license, and the command to be executed before installing.
  • This market plugin itself has zero builds, no install scripts, and does not trigger the allowBuilds prompt; however, other plugins installed by it may involve builds or scripts, requiring confirmation according to the panel warnings.
  • ★ N (+M) depends on daily snapshot data. Snapshots are written by GitHub Actions daily at 02:00 UTC to snapshots/YYYY-MM-DD.json; only repositories covered by a snapshot will display the increment.
  • The discovery page relies on public APIs (GitHub Search API), no backend, no LLM, no user quota.

Conclusion

The value of dsh-plugins-market is to put DSH plugin discovery, filtering, and installation confirmation into a single panel: filter out noise first, then display trust badges, and finally perform validation and command prompts before installation. The directory entry is in the Discover plugins tab under Settings -> Plugins; the project address is Luaphes/dsh-plugins-market.