dsh-insight

In the dsh plugin ecosystem, "is this plugin worth installing?" has never had a single tool that answers it outright. Scoring lives in one place, security auditing in another, and need-based matching elsewhere. Users either juggle three or four plugins and stitch the verdict together by hand, or just go with their gut.

dsh-insight collapses all three dimensions into one decision surface. plugin_guide matches a natural-language need against a curated set of 84 plugins across 14 categories and returns a reasoned recommendation; plugin_rank publishes a 0-100 health-score leaderboard spanning maintenance, docs, npm, and ecosystem signals; plugin_audit runs a heuristic static scan over a local checkout, flagging credential leakage, obfuscation, and persistence patterns; recipe offers eight community-tested bundles (notification stack, audit suite, and more) with an ordered install plan. plugin_verdict ties it all together, weighing score, scan results, and need fit into a single call that outputs install, caution, research, or avoid.

It is built for admins and power users who make frequent plugin-selection decisions in the dsh ecosystem and want one invocation to produce the full "is it safe, is it good, does it fit me?" answer. The entire plugin is a pure-logic layer with zero runtime dependencies, makes no outbound network requests of its own, and its audit step only reads a local directory you explicitly point to, keeping the trust boundary clear.