dsh-cc-tui| 认证等级 | L3 |
| 验证状态 | registry-confirmed（有 registry 凭证证据） |
| 验证方法 | integrity+bundle+patch · 2026-08-19 |
| 运行级实测 | 未做运行级实测 |
| 内容锚 | — |
| DID | did:cha2a:package:dsh-cc-tui |
| 身份锚点 | npm 未声明 GitHub 仓库——装前请自行核验来源 |
| 来源 | npm |
| 插件版本 | 0.4.2 |
| 安装 | dsh plugin add dsh-cc-tui |
| 扫描日期 | 2026-09-06T17:06:16.000Z |
| 扫描层级 | 静态扫描（自研规则 + GuardDog 复核 + OSV 依赖） |
| 扫描器版本 | dshlib-scan v0.1 · GuardDog 3.2.0 · OSV.dev |
自研扫描：⚠️ 待审 · GuardDog 复核：⚠️ 待审 · OSV 依赖：✅ 无已知漏洞
| 文件 | 行 | 命中 |
|---|---|---|
package/lib/types/ink/colorize.js | 135 | exec( |
package/lib/types/ink/colorize.js | 145 | exec( |
package/lib/types/commands.js | 71 | exec( |
package/lib/types/customTheme.js | 91 | exec( |
package/lib/types/customTheme.js | 95 | exec( |
package/lib/types/ink/parse-keypress.js | 97 | exec( |
package/lib/types/ink/parse-keypress.js | 104 | exec( |
package/lib/types/ink/parse-keypress.js | 107 | exec( |
package/lib/types/ink/parse-keypress.js | 110 | exec( |
package/lib/types/ink/parse-keypress.js | 113 | exec( |
package/lib/types/ink/parse-keypress.js | 124 | exec( |
package/lib/types/ink/parse-keypress.js | 131 | exec( |
package/lib/types/ink/parse-keypress.js | 498 | exec( |
package/lib/types/ink/parse-keypress.js | 534 | exec( |
package/lib/types/ink/parse-keypress.js | 557 | exec( |
package/lib/types/ink/parse-keypress.js | 580 | exec( |
package/lib/types/ink/parse-keypress.js | 646 | exec( |
package/lib/types/ink/parse-keypress.js | 650 | exec( |
package/lib/types/ink/selection.js | 298 | exec( |
package/lib/types/update.js | 65 | exec( |
`${t('login-api-key', { key: key ? key.slice(0, 6) + '…' + key.slice(-4) : t('login-key-missing') })}`,
────────────────────────────────────────
Assessment: Low risk (4.3/10)
3 risks detected
无已知依赖漏洞。