dsh-plugin-dedupe

Maintaining a DSH profile can turn into a dependency quagmire: the same plugin may be declared from npm, GitHub, and local file paths at the same time, while stale copies of the same package linger in node_modules. This kind of duplication makes the dependency graph hard to reason about and can cause unpredictable overwrite behavior during installs.
dsh-plugin-dedupe loads as a Cordis plugin and automatically scans the current profile at startup, cross-referencing package.json declarations against actual node_modules contents. It flags same-name multi-source declarations, duplicate package directories, and undeclared dsh-* leftovers, distinguishing hard errors from softer warnings. Its standout feature is registering as a pnpm preinstall hook that exits with a non-zero code before any duplicate plugin is even downloaded, blocking the install at the source.
If you manage a DSH profile with dozens of third-party plugins, or work in a team where members add and remove plugins manually and the dependency state drifts over time, this lightweight guardian catches duplicates on every install and saves you from manually diffing package.json against node_modules each time.