The DSH plugin ecosystem, in numbers
10,581 plugins are in the catalog as of 2026-11-11. Every figure on this page is computed from the catalog data each time the site rebuilds; none of it is typed in by hand.
How fast the catalog is growing
The catalog has been collecting entries since 2026-08. "Added" is the day an entry joined the catalog, not the day the plugin was written, so a plugin that existed earlier shows up when it was found. All 10,581 entries are counted below.
| Month added | Entries | |
|---|---|---|
| 2026-08 | 2,842 | |
| 2026-09 | 1,471 | |
| 2026-10 | 3,773 | |
| 2026-11 (month in progress) | 2,495 |
Where the plugins are
Share of the catalog by category, how many entries each gained in the last 30 days, and the most-downloaded plugin in it.
Downloads are concentrated in a few plugins
5,386 of 10,581 plugins publish an npm download count; the figures are downloads over the 30 days to 2026-11-11.
- The ten most-downloaded plugins account for 32.3% of all those downloads.
- The top hundred account for 54.7%.
- The median plugin has 1,258 downloads; one in ten has more than 4,553. npm counts include automated traffic such as mirrors and CI, so read them as relative size, not as the number of people using a plugin.
- 5,195 of 10,581 entries have no download figure: they are not published to npm, or the count is not available yet. GitHub-only plugins install straight from a repository.
- 5,437 entries (51.4%) are published to npm.
What plugins ask to do
The catalog statically scans each plugin's published code. 9,664 of 10,581 entries have been scanned (latest scan 2026-11-12). The table shows how many of those contain each kind of call.
| What the code does | Plugins | Of scanned |
|---|---|---|
| Reads files on this machine | 7,168 | 74.2% |
| Writes files on this machine | 5,783 | 59.8% |
| Reads environment variables | 5,772 | 59.7% |
| Uses the network | 5,755 | 59.6% |
| Can run commands | 3,721 | 38.5% |
| Uses your keys | 971 | 10.0% |
| Calls an AI model | 850 | 8.8% |
| Runs code assembled at runtime | 555 | 5.7% |
| Uses DSH internal packages | 520 | 5.4% |
| Starts tasks on its own | 201 | 2.1% |
- 1,419 scanned plugins (14.7%) showed none of the above.
- 891 plugins (9.2% of those scanned) both use the network and read keys or credentials. That is what a plugin that calls a model has to do, so it is the most common finding rather than a warning sign.
- 30 plugins ship a script that runs at install time, before you open the plugin. These are the ones worth reading first.
"Not detected" never means "safe": a static scan cannot see code built at runtime or fetched later. These are things to look at, not verdicts. See what the labels mean.
How this was computed
Source: the catalog at awesome-dsh-plugin.com, the same list that powers the market. Percentages use the stated denominator and are rounded to one decimal place. The figures change as the catalog does; the page is rebuilt every day.