{
  "name": "@perrylink/dsh-skill-pack-security-provider",
  "version": "2.2.8",
  "description": "Provider plugin for dsh-skill-pack-security: registers the pack's skills/ (zh) or skills-en/ (en) edition on ctx.skills AND the plugin_vet supply-chain gate tool on ctx.tools (license/SBOM/commit-lock/malware scans + five-dimension risk card). Ships both skill editions embedded in pack/.",
  "type": "module",
  "main": "lib/index.js",
  "types": "lib/types/index.d.ts",
  "engines": {
    "node": "^22.19.0 || >=24.0.0"
  },
  "packageManager": "pnpm@11.7.0",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/PerryLink/dsh-skill-pack-security.git",
    "directory": "provider"
  },
  "files": [
    "lib/index.js",
    "lib/vet/**",
    "lib/types/**/*.d.ts",
    "pack/**",
    "cordis.patch.yml"
  ],
  "dsh": {
    "bundle": {
      "patch": "./cordis.patch.yml"
    }
  },
  "dshWorkshop": {
    "schema": "omdsh-workshop-package/v1",
    "type": "plugin",
    "integration": {
      "protocol": "harness-profile",
      "artifact": "cordis.patch.yml"
    },
    "install": {
      "mode": "transactional",
      "adapter": "profile-bundle",
      "failurePolicy": "generation-rollback",
      "touchesCurrentBeforeActivation": false
    },
    "lifecycle": {
      "activation": "restart-profile",
      "dispose": "supported"
    },
    "permissions": [
      "files:read",
      "network:fetch"
    ],
    "compatibility": {
      "dshVersions": [
        "0.1.2-rc.1"
      ]
    },
    "capability": {
      "id": "skill-pack-security",
      "kind": "tool",
      "invocation": "execute the plugin_vet tool against a GitHub owner/repo target",
      "expected": "ctx.tools has plugin_vet and its report lists license/SBOM/commit-lock/malicious findings with skill-section citations for manual follow-up"
    },
    "evidence": {
      "install": null,
      "failureIsolation": null,
      "hotReload": null,
      "remove": null
    }
  },
  "license": "Apache-2.0",
  "keywords": [
    "dsh",
    "dsh-plugin",
    "deepseek-harness",
    "skill-pack",
    "skills",
    "security",
    "security-audit",
    "supply-chain"
  ],
  "peerDependencies": {
    "@deepseek-ai/cordis": "^4.0.2",
    "@deepseek-ai/dsh-skill-filesystem": ">=0.1.2-rc.1 <0.2.0",
    "@deepseek-ai/dsh-tools": ">=0.1.2-rc.1 <0.2.0",
    "@deepseek-ai/schemastery": "^3.18.2"
  },
  "devDependencies": {
    "@deepseek-ai/cordis": "^4.0.2",
    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
    "@deepseek-ai/dsh-skill-filesystem": "0.1.2-rc.1",
    "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
    "@deepseek-ai/schemastery": "^3.18.2",
    "@types/node": "^26.4.0",
    "typescript": "^7.0.2"
  },
  "scripts": {
    "build": "tsc --noEmitOnError",
    "typecheck": "tsc --noEmit",
    "prepack": "node scripts/copy-skills.mjs"
  }
}