_{“Certified” is our own family attestation, not an independent audit or a DeepSeek endorsement.}

I fix other people's projects, I maintain a plugin family for DeepSeek Harness, and I run Phocinae, my typed-decision model lab. Independent open-source developer in Beijing — not affiliated with DeepSeek, and not a DeepSeek employee.

Upstream — 509 merged pull requests in 102 repositories that are not mine, from AWS, Apple, Docker, Microsoft, NVIDIA, Prometheus, Redis, Tencent and the vLLM project down to one-person projects. Of the 509, 475 left a commit on the default branch in 99 credited repositories; 34 merges in 3 repositories credit no commit, giving 102 repositories in total. The family — 126 actively maintained Apache-2.0 plugins: security, workflows, research, messaging bridges, developer experience, since 2026-10-08 a 53-checker compliance suite plus nine newer compliance tools, and 27 business tools that became a task-first plugin market on 2026-11-03: six feed the finance/contract suites, the rest are specialist tools (invoicing, banking, contracts, quality, customs, logistics, HR, retail, construction, PDF tables, model parameters), one is an install companion and one is an eval utility. The 27 domain tools are at 0.1–0.2 with no alpha tag; most are explicitly marked not-GA in their READMEs, and each first run we exercised is captured in a pack, with five scenario packs chaining them end to end. The old dsh-eval-harness was renamed to dsh-eval-pack. The public catalogue is perrylink.github.io — 185 pages under the plugin index (the site sitemap lists 114 URLs besides the root), complete in the served HTML with no JavaScript rendering them, so a reader who arrives from a search result sees the text rather than a loading state.

I also contribute to Cordis, the plugin kernel DeepSeek Harness vendors as @deepseek-ai/cordis — nine merged pull requests there, from async-generator cleanup to reload behaviour.

中文读者 · 只想核对一份材料？ 按「手上是什么材料」选一个核查器（53 个核心，全中文）→ · 另有 6 个新增核查器与 3 个工作台工具，见 合规组（62）。

Every repository below is external to PerryLink/*, every row is merged work, and open proposals are deliberately not listed — as of 2026-11-04T15:12:00Z, 175 are open across 139 repositories. ★ re-measured 2026-10-31 for every row; the third column names the party that owns the project, because the account name alone does not say whether that is a company, a standards body or one person. Every external repository above 1,000★ that we found with merged work is listed (stars as of 2026-10-31; not a ranking): nineteen above 10,000★ in the table, thirty-eight between 1,000★ and 10,000★ in the fold below, and another forty-five below 1,000★ counted in the 509 but not listed individually.

Another 45 external repositories below 1,000★ carry merged work and are counted in the 509; they are not listed individually.

The family is three layers plus a separate decision-model line, not a single install list. Every repository is indexed in FAMILY.md.

Each row lists representative entry points, not the whole group; the all N link opens the full section in FAMILY.md. Only dsh-phocinae is counted in the 126/137 roster; the other 11 Phocinae repositories are a separate org line outside those counts.

The runtime/domain roster is 137 rows: 126 active, 8 frozen, 3 retired. dsh-kit installs the 96-spec mainline (43 defaults + 53 opt-in checkers), not the whole family. Install scopes: ROSTER.md; machine catalogue: dsh-catalog; per-repo detail: FAMILY.md.

Two different decisions, both about not maintaining a duplicate.

Retired — the official harness absorbed the capability. Three plugins stopped because the harness now ships the same capability natively — dsh-background-agents (native continuable subagents), dsh-session-pin (built-in session pinning) and dsh-team-rooms (Agent Teams, experimental/opt-in).

Frozen — feature work stopped. Eight first-party rows are frozen: dsh-autotier, dsh-budget, dsh-cert-mcp (reference only), dsh-claude-move, dsh-community-bench, dsh-defend, dsh-draw and dsh-reach. The third-party pan17/dsh-wechat is separate; check its upstream status. For our own rows, compatibility updates stop, existing installs keep working, and we do not maintain a second implementation. This is a measured adoption call, not a quality verdict.

• GitHub (this profile), Gitee and npm — source, CI and releases here; the mainline Gitee mirror covers 108 repositories (default branch and all tags), while the domain set adds five flagships plus both suites on Gitee and three flagships plus both suites on GitCode, with latest release assets. The perrylink npm account holds 180 names and 2,296 versions (registry export, 2026-11-03; the maintainer:perrylink search indexes 156 of them); 156 of them carry a SLSA provenance attestation on at least one version, 123 on the current latest.
• npm downloads — 273,579 over the 30 days to 2026-10-30. dshfind lists the family's repositories in its sitemap and publishes a download badge for 9 of them — three at 10k+, two at 5k+, two at 2k+, one at 1k+ and one at 500+ — which add to 45,500+. The badges are rounded tiers, so that is a floor and not a total.
• DSH Desktop Market — add https://cdn.jsdelivr.net/gh/PerryLink/dsh-catalog@main/deploy/artifacts/v1/plugins.json under Market → Sources to browse the family in-app (125 packages, catalogue generated 2026-11-03).
• MCP Registry — four servers, all published from their release workflows over GitHub OIDC: dsh-cert-mcp (🧊 frozen, reference only), dsh-customs-mcp, jevcore-mcp and laya-mcp.
• GitHub Actions — dsh-github and dsh-test-drive also ship composite actions, so they install as uses: PerryLink/dsh-test-drive@vX.
• Third-party directories — a dozen-plus DSH lists and indexes ingest the dsh-plugin topic; one flagship, dsh-auto-review, carries an OpenSSF Scorecard.

Measured, not remembered. How every figure is measured is in INSTRUMENTATION.md, and what each round corrected is in CHANGELOG.md.