github JavaScript analyzed 663c2a6

dongsheng123132/dsh-surface-contract-proof

github

Content-addressed conformance proof across recorded DSH ToolRuntime, MCP JSON-RPC and CLI JSON surfaces

maintainer
dongsheng123132
license
MIT
first seen
2026-08-14
last seen
2026-08-14
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 2 tools
transport stdio counts 2 tools · 0 res · 0 prompts permission surface via README inference

tools

  • dsh_surface_contract_inspect
  • dsh_surface_contract_verify
code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 10

filesystem 5

  • fs (weak) dongsheng123132-dsh-surface-contract-proof-663c2a6/examples/create-sanitized-suite.mjs :3 import { mkdir, writeFile } from 'node:fs/promises'
  • fs dongsheng123132-dsh-surface-contract-proof-663c2a6/lib/surface-contract-proof.mjs :2 import { link, lstat, mkdir, readFile, realpath, unlink, writeFile } from 'node:fs/promises'
  • fs (weak) dongsheng123132-dsh-surface-contract-proof-663c2a6/scripts/check.mjs :1 import { access, readFile } from 'node:fs/promises'
  • fs (weak) dongsheng123132-dsh-surface-contract-proof-663c2a6/test/dsh-runtime-smoke.mjs :3 import { mkdtemp, rm } from 'node:fs/promises'
  • fs (weak) dongsheng123132-dsh-surface-contract-proof-663c2a6/test/surface-contract-proof.test.mjs :4 import { mkdtemp, mkdir, readFile, rm, symlink, writeFile } from 'node:fs/promises'

shell / exec 2

  • shell (weak) dongsheng123132-dsh-surface-contract-proof-663c2a6/test/dsh-runtime-smoke.mjs :7 import { spawn } from 'node:child_process'
  • shell (weak) dongsheng123132-dsh-surface-contract-proof-663c2a6/test/mcp-smoke.mjs :2 import { spawn } from 'node:child_process'

declared dependencies 1

  • @deepseek-ai/dsh-tools@0.0.1-rc.1