DSHIO-LIST · Listing
What enters the index, what gets marked removed, and why removed entries are kept.
Entry conditions
| Clause | Condition | How |
|---|---|---|
| L1 | Exists on npm or Git | Registry / repository metadata |
| L2 | package.json parses | Read the manifest |
| L3 | Declares dsh.bundle.patch | Read the manifest |
| L4 | Not private: true | Read the manifest |
| L5 | Package name is a valid npm name | Format check |
L1–L5 is the whole bar. Quality is not an entry criterion.
We are not a boutique that lists only good plugins — that leaves users unable to see what was
excluded. Listing is broad; quality is expressed by the grade.
Three states
| State | Meaning | Source |
|---|---|---|
| Tested | Ran DSHIO-TEST, has a grade | Our runs |
| Untested | Listed, not yet run | — |
| Removed | No longer available; record kept | See below |
Four removal cases
| Case | Determination | Record |
|---|---|---|
| npm returns 404 | Registry lookup fails | npm-gone, moved to removed |
| Repo archived or deleted | GitHub archived: true | archived |
| Security red line violated | Any of DSHIO-DEV 6.1–6.6 | removed-violation |
| Impersonation | Pretending to be official or another author | impersonation |
Why removed entries are kept.
"This package existed and is now gone" is itself information:
· users want to know why a plugin they saw will not install
· authors want to know their package now 404s
· everyone wants to know what has disappeared from the ecosystem
Deleting the record erases history. Removed plugins live permanently on the removed page.
· users want to know why a plugin they saw will not install
· authors want to know their package now 404s
· everyone wants to know what has disappeared from the ecosystem
Deleting the record erases history. Removed plugins live permanently on the removed page.
What is not listed
| Type | Reason |
|---|---|
| Not a DSH plugin (no dsh.bundle) | Would not load |
| Placeholder repository with no code | Nothing to install |
| Bare tarball URLs | Untraceable provenance |
| URLs carrying credentials | Security |
Data sources and refresh
| Data | Source | Frequency |
|---|---|---|
| Existence | npm registry / GitHub API | Daily |
| Downloads / stars | npm / GitHub | Daily |
| Version list | npm registry | Daily |
| Test results | Our sandbox | On demand + periodic |
Version history
| Version | Standard No. | Published | Change |
|---|---|---|---|
| v1.0 | DSHIO/T 04—2026 | 2026-11-06 | First release |
The version increments on any clause change; older versions remain available.