I fix other people's projects, I maintain a plugin family for DeepSeek Harness, and I run Phocinae, my typed-decision model lab. Independent open-source developer in Beijing — not affiliated with DeepSeek, and not a DeepSeek employee.
Upstream — 502 merged pull requests in 102 repositories that are not mine, from AWS, Apple, Docker,
Microsoft, NVIDIA, Prometheus, Redis, Tencent and the vLLM project down to one-person projects. The
family — 114 actively maintained Apache-2.0 plugins: security, workflows, research,
messaging bridges, developer experience, since 2026-10-08 a 53-checker compliance suite plus nine newer
compliance tools, and since 2026-10-31 fifteen public/synthetic S1 business tools: all fifteen are active: six feed the
finance/contract suites, seven are specialist tools, one is an install companion, and
one is an eval utility; the old dsh-eval-harness is archived in favor of dsh-eval-pack. Their
own READMEs mark them not GA. The public catalogue is
perrylink.github.io — 114 pages in its sitemap, complete in the served
HTML with no JavaScript rendering them, so a reader who arrives from a search result sees the text rather
than a loading state.
I also contribute to Cordis, the plugin kernel DeepSeek Harness
vendors as @deepseek-ai/cordis — nine merged pull requests there, from async-generator cleanup to reload
behaviour.
中文读者 · 只想核对一份材料? 按「手上是什么材料」选一个核查器(53 个,全中文)→
| Plugin | What it gives you | Install |
|---|---|---|
| dsh-auto-review | Second-model auto-review on the approval chain, fail-closed by default (245★) | dsh plugin --profile web add dsh-auto-review |
| dsh-research-report | Verifiable research reports: content-addressed evidence ledger, manifest seal hash, byte-level citation checks, drift detection, disproof ledger (213★) | dsh plugin --profile web add dsh-research-report |
| dsh-industry-research | Industry/company research: chain-map SVG with bottleneck detection, timeline, company cards, adversarial review (215★) | dsh plugin --profile web add dsh-industry-research |
| dsh-memento | Approval-gated cross-session memory (ctx.memory + SQLite) (143★) |
dsh plugin --profile web add dsh-memento |
| dsh-permission-rules | Claude Code-style declarative allow/deny/ask rules plus a process-level network policy (136★) | dsh plugin --profile web add dsh-permission-rules |
| dsh-mcp-panel | MCP management console: /mcp + Settings tab + trial calls (91★) |
dsh plugin --profile web add dsh-mcp-panel |
| dsh-phocinae | Local, non-generative verdicts for the approval chain: a small typed decision model behind phocinae_ask / phocinae_gate, with fail-closed escalation for everything it does not answer (1★) |
dsh plugin --profile web add dsh-phocinae |
Four small CLIs for the plugin lifecycle — not runtime plugins, so they do not change the 114-plugin roster. They are independent, Apache-2.0, non-official, and they do not certify or rank anything.
| Repo | What it gives you | npm |
|---|---|---|
| dsh-plugin-start | dsh-start new — a minimal, correct plugin skeleton |
|
| dsh-plugin-ready | dsh-ready — static ENTRY preflight; --host is a clinic X probe, not C3 |
|
| dsh-plugin-tools | dsh-tools list/doctor/install — toolchain guidance, never auto-installs |
|
| dsh-plugin-dev | dsh-dev — the front door: new / check / test / submit / upgrade |
npm i -g dsh-plugin-dev
dsh-dev new my-plugin
cd my-plugin
dsh-dev check .
dsh-dev test . # temp DSH_HOME: add → dump-config → remove
dsh-dev submit . # full vendored ENTRY checker; --host-version optionaldsh-dev test is FLOW J1 evidence, not C3. dsh-dev submit runs the full checker offline, or delegates to a
dsh-plugin-spec checkout. C3 is FLOW-only; a static pass is not a host install, audit, or certification.
- Canonical standards: dsh-plugin-spec
- Old names: dsh-primer (was
dsh-plugin-guide) and dsh-clinic (wasdsh-plugin-doctor); old repos and npm names remain as pointer/deprecated pages. - Mirrors: Gitee · GitCode
- Archive/index: dsh-plugin-devtools
Phocinae is my own org for local typed-decision models and tools — a separate line from the DSH plugin family. Its flagship, Phocinae-Largha-150M-v1 (Apache-2.0, 433★), is a 144.3M bilingual typed decision model — no text generation; one forward pass returns a verdict per question with calibrated confidence. GPU 21.0 ms (RTX 5090) p50 per decision, CPU-only 1.64 s per case; English typed-decisions 0.906 (400 cases / 2,000 decisions, re-measured 2026-10-09), Chinese (machine-translated eval set) 0.848. With a τ=0.6 escalate gate, 55.0% of agent decisions stay local (79.6% at τ=0.5) and kept-subset accuracy moves 0.906 → 0.9936 (+0.0876) — the gate makes the system better, not just cheaper.
| Phocinae project | What it gives you |
|---|---|
| Phocinae-Largha-150M-v1 | 144.3M bilingual typed-decision model (433★); weights on Hugging Face and ModelScope |
| phocinae-server | Local inference server, TypeSafe /v1/systemone-compatible API |
| phocinae-guard | Fail-closed command approval gate for Claude Code, Cline, Codex, Crush and DSH hooks |
| phocinae-mcp | MCP server exposing gate / classify / route / score |
| phocinae-cli · phocinae-js | CLI and zero-runtime TypeScript client |
| dsh-phocinae and the org's DSH line | phocinae_ask / phocinae_gate, plus dsh-batch-triage, dsh-context-verdict and dsh-evidence — the org's own plugins, outside the PerryLink/* roster |
The org profile is the full map: github.com/Phocinae. The model card is
on Hugging Face and
ModelScope; the server is
pip install phocinae-server. Reproduction ships with the model repo: seeds, row-set hashes, environment and
eval scripts.
Every repository below is external to PerryLink/*, every row is merged work, and open proposals are
deliberately not listed — as of 2026-11-02T14:40:00Z, 169 are open across 126 repositories. ★ re-measured
2026-10-31 for every row; the third column names the party that owns the project, because the account name
alone does not say whether that is a company, a standards body or one person. Every external repository
above 1,000★ that carries merged work is listed: sixteen above 10,000★ in the table, thirty-seven between
1,000★ and 10,000★ in the fold below, and another forty-five below 1,000★ counted in the 502 but not
listed individually.
| Repository | ★ | 项目归属方 |
|---|---|---|
| dify | 160,079 | LangGenius — the official langgenius org; the open-source LLM application platform (dify.ai) |
| deer-flow | 84,759 | ByteDance — the official bytedance org |
| ruflo | 80,367 | ruvnet (rUv / Reuven Cohen) — individual maintainer |
| reactive-resume | 45,118 | reactive-resume org — independent open-source project (rxresu.me) |
| milvus | 46,555 | LF AI & Data Foundation — the milvus-io org; the vector database project donated by Zilliz |
| black | 42,085 | Python Software Foundation — the official psf org; the Black formatter |
| zoxide | 40,381 | ajeetdsouza (Ajeet D'Souza) — individual maintainer; the smarter cd command |
| fiber | 40,237 | the gofiber project — the official gofiber org (gofiber.io), the Express-inspired Go web framework |
| laya | 34,735 | NandhaKishorM — individual maintainer |
| cli | 24,306 | the urfave org — community-maintained Go CLI framework |
| go-redis | 22,284 | Redis — the redis org; the Go client for Redis |
| learn-harness-engineering | 22,634 | walkinglabs community org — the harness-engineering tutorial site |
| awesome-dsh-plugin | 21,732 | awesome-dsh-plugin org — community catalog, no company behind it |
| SkillOpt | 18,785 | Microsoft — the official microsoft org |
| MMKV | 18,767 | Tencent — the official Tencent org; the key-value store behind WeChat |
| ioredis | 15,351 | Redis — the official redis org; the Node.js Redis client |
| FlashMLA | 13,225 | DeepSeek — the official deepseek-ai org |
| webpack-bundle-analyzer | 12,654 | the webpack org — the bundle analysis plugin and CLI |
| txtai | 13,053 | NeuML — the txtai project of NeuML, an independent open-source project |
Thirty-eight more between 1,000★ and 10,000★ — one line each
| Repository | ★ | 项目归属方 |
|---|---|---|
| dsh-market | 9,947 | dsh-market org — the community plugin market behind dshmarket.com |
| dsh-web | 9,880 | zhu1090093659 — individual maintainer |
| mcp | 9,854 | Amazon Web Services (AWS) — the official awslabs org |
| BrowserSkill | 9,841 | Tencent — the official Tencent org |
| Cordis | 9,495 | cordiverse org — the kernel DeepSeek Harness vendors as @deepseek-ai/cordis |
| jc | 8,697 | kellyjonbrazil (Kelly Brazil) — individual maintainer |
| models.dev | 7,460 | anomalyco org — the model-catalogue site behind models.dev |
| openpencil | 6,991 | ZSeven-W org — an independent open-source vector-design tool |
| kraken | 6,774 | Uber — the official uber org; the Kraken P2P Docker registry |
| koishi | 6,307 | koishijs org — the cross-platform chatbot framework |
| ouroboros | 6,292 | Q00 (@zep-us) — individual maintainer |
| client_golang | 6,043 | Prometheus — the official prometheus org (CNCF project); the Go instrumentation client |
| teamai-cli | 5,721 | Tencent — the official Tencent org |
| go-sdk | 5,291 | the modelcontextprotocol org — the Go SDK for MCP |
| skillhub | 5,353 | iFLYTEK — the official iflytek org; self-hosted registry for agent skills |
| aibrix | 5,171 | the vLLM project — the official vllm-project org |
| embedding-atlas | 5,007 | Apple — the official apple org |
| DSH-better-sidebar | 4,771 | omdsh-dev community org — the DeepSeek Harness sidebar plugin |
| docker-agent | 4,625 | Docker, Inc. — the official docker org |
| agent-client-protocol | 4,553 | agentclientprotocol org — governed jointly by Zed Industries and JetBrains |
| client_python | 4,385 | Prometheus — the official prometheus org (CNCF project); the Python instrumentation client |
| content | 3,676 | Nuxt — the official nuxt org |
| evalscope | 3,622 | modelscope org — the ModelScope model-hub project |
| deepseek-harness-desktop | 3,386 | dsh-tauri community org — self-described non-official and non-commercial |
| fastmcp | 3,284 | punkpeye (Frank Fiegel) — individual maintainer at Glama |
| minio-go | 3,010 | MinIO — the official minio org; the Go client for MinIO and S3-compatible storage |
| open5gs | 2,799 | the open5gs 5G core project — community, no company owner |
| claude-agent-acp | 2,712 | agentclientprotocol org — governed by Zed and JetBrains |
| NeMo-Agent-Toolkit | 2,688 | NVIDIA — the official NVIDIA org |
| Agents-Anywhere | 2,556 | anywhere-labs community org — 3 public repos, created 2026-05; not a company |
| awesome-jev | 2,515 | yibie — individual maintainer; community catalog for Jev |
| deep-research-web-ui | 2,224 | AnotiaWang — individual maintainer |
| nginx-upsync-module | 1,844 | weibocom — the Weibo open-source org |
| mcp-remote | 1,659 | punkpeye (Frank Fiegel) — individual maintainer at Glama |
| dsh-plugin-radar | 1,488 | AdamPlatin123 — individual maintainer, catalog is a generated artifact |
| awesome-deepseek-harness | 1,286 | 0xsline — individual maintainer, community catalog |
| dsh-vision-router | 1,202 | ysr666 — individual maintainer |
| awesome-agent-apis | 1,065 | Anil Chandra Naidu Matcha — individual maintainer, community catalog |
Another 45 external repositories below 1,000★ carry merged work and are counted in the 502; they are not listed individually.
The roster holds 125 repositories — 127 declare the dsh.bundle.patch contract, minus the two retired
corridor legs — and 114 are actively maintained (3 retired, 8 frozen), plus the support repositories —
dsh-kit, dsh-catalog, the certification registry and the CI checker — and one third-party plugin carried
as a row. The 8 frozen are the original five plus dsh-autotier, dsh-cert-mcp and dsh-community-bench.
Fifteen S1 demos were published 2026-10-31 and are all active as of 2026-11-01: six feed
dsh-finops-suite / dsh-contract-suite, seven are specialist tools (dsh-docx-redline,
dsh-freight-audit, dsh-ghg, dsh-hs-candidate, dsh-ifc-qto, dsh-pim-lint, dsh-qms-capa),
dsh-policy-ledger is an install companion, and dsh-eval-pack is an eval utility; the old dsh-eval-harness is archived in favor of it. The roster figure here is measured from each repository's own package.json and includes
the three 2026-10-31 bundle repos (dsh-eval-pack, dsh-finops-suite, dsh-contract-suite). The install
list is plugins.txt in dsh-kit, which is the 96-spec mainline installer (43 default + 53 opt-in checkers), not the whole 125-row family; the exact scope table is ROSTER.md. The machine-readable catalogue is
dsh-catalog, which is also the DSH Desktop Market source.
The eleven story buckets below are a narrative index, not the marketplace filter. The market filter is the four-axis taxonomy (12 categories + archetype + domain): TAXONOMY.md · 125-row view · roster scopes. Each plugin's own README carries the one-line detail.
| # | Some of what is in it | |
|---|---|---|
| 🔒 Security | 4 | dsh-permission-rules · dsh-mask · dsh-defend |
| 🔁 Workflows | 8 | dsh-checkpoint-rewind · dsh-github · dsh-test-drive |
| ✨ Experience & UX | 4 | dsh-memento · dsh-composer-history · dsh-output-styles |
| 🧪 Evaluation | 3 | dsh-doublecheck · dsh-score · dsh-auto-review |
| 📊 Observability & cost | 5 | dsh-observe · dsh-autotier 🧊 · dsh-fast · dsh-phocinae |
| 🎨 Content & knowledge | 5 | dsh-talk · dsh-translate · dsh-library |
| 🛠️ Developer experience | 6 | dsh-mcp-panel · dsh-primer · jevcore |
| 📱 Messaging & bridges | 4 | dsh-phone-inbox · dsh-ticktick · dsh-reach · dsh-wechat |
| 🔬 Research | 4 | dsh-research-report · dsh-industry-research · dsh-fund-research |
| ✅ Compliance & verification | 59 + 3 | 59 checker-first (53 core + 6 newer checker/audit) plus 3 workbench tools (excel-reconcile, table-ingest, tender-requirements); the list is at the checker index |
| 🏢 Business operations | 15 | 15 active (6 suite members, 7 specialist tools, dsh-policy-ledger as install companion, dsh-eval-pack as eval utility); subdomains finance, legal, ESG, quality, trade, logistics, documents/BIM. dsh-bankrec · dsh-einvoice · dsh-legal-intake — public/synthetic S1 demos, not GA |
Two different decisions, both about not maintaining a duplicate.
Retired — the official harness absorbed the capability. Three plugins stopped because the harness now ships the same capability natively — dsh-background-agents (native continuable subagents), dsh-session-pin (built-in session pinning) and dsh-team-rooms (Agent Teams, experimental/opt-in).
Frozen — the ecosystem converged on a more widely adopted implementation. Five plugins — dsh-budget,
dsh-draw, dsh-claude-move, dsh-reach and dsh-defend — plus the third-party dsh-wechat row stopped
feature work because a more widely adopted implementation is the mainstream choice for that capability.
This is a measured adoption call, not a quality verdict; the repos that carry a maintenance-status section record the comparison.
2026-10-31 freeze batch. Ten more plugins stopped feature work: dsh-autotier, dsh-cert-mcp,
dsh-community-bench, and seven S1 demos (dsh-docx-redline, dsh-freight-audit, dsh-ghg,
dsh-hs-candidate, dsh-ifc-qto, dsh-pim-lint, dsh-qms-capa). Their repos carry
## Maintenance status: 🧊 FROZEN; packages stay installable. Six S1 demos remain active as
dsh-finops-suite / dsh-contract-suite components, dsh-policy-ledger stays active as an install
companion, and dsh-eval-harness was archived in favor of dsh-eval-pack (repo-only; the old scoped npm
name is deprecated). dsh-memento, dsh-plugin-upgrade, dsh-checkers, dsh-skill-pack-security,
dsh-phone-inbox, dsh-score and the Phocinae line were re-scoped, not frozen.
Either way, the operational meaning is the same: compatibility updates stop, existing installs keep working, and no second implementation is maintained.
- GitHub (this profile), Gitee and npm — source, CI and releases
here; the mainline Gitee mirror covers 108 repositories (default branch and all tags), while the domain set adds five flagships plus both suites on Gitee and three flagships plus both suites on GitCode, with latest release assets. The
perrylinknpm account holds 136 names and 1,833 versions; 122 of them carry a SLSA provenance attestation on at least one version, 116 on the currentlatest. - npm downloads — 273,579 over the trailing 30 days (window 2026-10-01..10-30). dshfind lists 35 of the family's repositories in its sitemap and publishes a download badge for 9 of them — three at 10k+, two at 5k+, two at 2k+, one at 1k+ and one at 500+ — which add to 45,500+. The badges are rounded tiers, so that is a floor and not a total.
- DSH Desktop Market — add
https://cdn.jsdelivr.net/gh/PerryLink/dsh-catalog@main/deploy/artifacts/v1/plugins.jsonunder Market → Sources to browse the family in-app (126 packages, catalogue generated 2026-11-01). - MCP Registry — four servers, all published from their release workflows over GitHub OIDC:
dsh-cert-mcp(🧊 frozen, reference only),dsh-customs-mcp,jevcore-mcpandlaya-mcp. - GitHub Actions — dsh-github and
dsh-test-drive also ship composite actions, so they
install as
uses: PerryLink/dsh-test-drive@vX. - Third-party directories — a dozen-plus DSH lists and indexes ingest the
dsh-plugintopic; the family is scored on OpenSSF Scorecard.
中文介绍
独立开源开发者,在北京,与 DeepSeek 无隶属关系。三条线:给别人的项目修 bug(AWS、Apple、Docker、
Microsoft、NVIDIA、Redis、Tencent、vLLM,也包括一个人的小项目);给 DeepSeek Harness 维护一套
Apache-2.0 插件生态 —— 安全、工作流、研究、消息桥接、开发者体验,加上合规核查与 2026-10-31 的一批
公开 S1 工具(其中六个并入 finance/contract suite,七个已冻结;各自 README 标了 not GA),以及 2 个裸名 suite
(dsh-finops-suite / dsh-contract-suite);以及 Phocinae,我自己的本地
typed-decision 模型与工具 org。
插件目录在 perrylink.github.io,正文直接写在 HTML 里,不靠 JavaScript
渲染。也向上游 Cordis(DeepSeek Harness 以 @deepseek-ai/cordis
引入的插件内核)与 deepseek-ai 提交修复;Cordis 是我持续提交修复的
上游之一。
数字只在上面的英文部分维护一份;这里不重复,以免两处走样。
Measured, not remembered. How every figure is measured is in INSTRUMENTATION.md, and what each round corrected is in CHANGELOG.md.





