Week 45, updated 2 Nov 2026

Coding agents deepseek-harness

Is deepseek-harness safe?

Short answer: Caution. StackGrade's weekly scan of deepseek-ai/deepseek-harness gives it a Caution label for 7 critical-severity known vulnerabilities in runtime dependencies (OSV). It does list 56 high-severity advisories in runtime dependencies, which don't change the label. Critical advisories are counted once per package; a known issue in a locked package version does not prove deepseek-harness is exploitable in your setup. Automated scan of commit ce7073d on 2 Nov 2026, not a manual audit.

Updated : the last week its score, rank or safety result changed.

DeepSeek's official agent harness built around plugins.

  • 268,675 stars
  • pushed 30 Oct
  • MIT
  • TypeScript

github.com/deepseek-ai/deepseek-harness · deepseek.com/harness

57score out of 100

#17of 52 overall#7in Coding agents▼ 1 vs Week 44

  • Maintenance 30%44
  • Adoption 30%97
  • Docs 20%18
  • Community 20%–
W42W43W44W45

Score over the last 4 weeks: 65, 59, 58, 57.

Caution

7 critical-severity known vulnerabilities in runtime dependencies (OSV).

How this score works

Each part is a percentile among all 52 tracked tools, so 50 is average for this list. Community is not measured yet; the score uses the other 80%.

  • Maintenance: Last push 30 Oct 2026. Last 10 GitHub releases within 20 days (about 13 per 30 days), latest release 30 Oct 2026. Issue close time: fewer than 5 closed issues, so not used.
  • Adoption: 268,675 stars (70%), 32,612 forks (30%).
  • Docs: README 2,669 characters, 10 headings, 3 code blocks, install section: yes.

Methodology

#7 of 14 in Coding agents

Ranked by score. The yellow row is this tool.

Coding agents, Week 45score 0–100, safety
  1. 1Gemini CLI#4 overall70Caution
  2. 2OpenCode#5 overall70No issues found
  3. 3OpenHands#10 overall68Caution
  4. 4Claude Code#11 overall65No dependencies scanned
  5. 5Cline#12 overall65Caution
  6. 6Codex#16 overall58Caution
  7. 7deepseek-harness#17 overall57Caution
Show the other 7
  1. 8KiroCrew#27 overall52Caution
  2. 9magpie#28 overall51No issues found
  3. 10Continue#43 overall37Caution
  4. 11goose#44 overall36Caution
  5. 12Aider#45 overall31Caution
  6. 13codex-plugin-cc#48 overall29No issues found
  7. 14Roo Code#51 overall23Caution

Safety scan, 2 Nov 2026

Automated scan of commit ce7073d, 18,560 files. Not a manual audit.

Caution

  • 7Critical dependency advisories56 high, 36 medium, 6 low. OSV, runtime dependencies only.
  • 2Install hooksnpm scripts that run on install; none downloads remote content.
  • 0Remote-code patternsFor example eval(fetch(…)).
  • 228Agent files checked0 phrases flagged for review.
  • 0curl | sh installersIn docs or program code. Information only.
Why this label?

Why this label:

  • 7 critical-severity known vulnerabilities in runtime dependencies (OSV)

Known vulnerabilities in runtime dependencies (OSV): 7 critical, 56 high, 36 medium, 6 low, 1 unrated

  • dompurify@3.4.16 (GHSA-cg2g-xh64-v4q7) in pnpm-lock.yaml
  • pillow@12.3.0 (PYSEC-2026-4330) in python/sdk/uv.lock
  • pillow@12.3.0 (PYSEC-2026-4332) in python/sdk/uv.lock
  • pillow@12.3.0 (PYSEC-2026-4339) in python/sdk/uv.lock
  • pillow@12.3.0 (GHSA-332p-7hrc-92wf) in python/sdk/uv.lock

Also found (informational, does not change the label):

  • 56 high-severity known vulnerabilities in runtime dependencies (OSV)
  • 2 npm install hooks, none downloading remote content

Notes:

  • 6 affected packages only in dev/test/docs manifests, not counted
  • Telemetry/analytics references in code: telemetry, amplitude

Automated scan of commit ce7073d on 2 Nov 2026, not a manual audit. 18,560 files checked. What we check

Repo activity

From the GitHub API, fetched 2 Nov 2026.

  • 10+Releases, 90 daysLatest dsh-v0.2.1-rc.5, 30 Oct
  • –Median issue closeFewer than 5 closed issues
  • 269kStars+6,977 since 26 Oct
  • 32.6kForks0 open issues
  • 2026Repo created13 Aug 2026
30 days ago2 Nov
10 releases in the last 30 days, one mark each (GitHub releases feed, last 10 entries).

10 releases in the last 30 days (GitHub releases feed, last 10 entries):

Questions about deepseek-harness

Answers use this week's StackGrade data.

Is deepseek-harness safe to use?

Caution. StackGrade's weekly scan of deepseek-ai/deepseek-harness gives it a Caution label for 7 critical-severity known vulnerabilities in runtime dependencies (OSV). It does list 56 high-severity advisories in runtime dependencies, which don't change the label. Critical advisories are counted once per package; a known issue in a locked package version does not prove deepseek-harness is exploitable in your setup. Automated scan of commit ce7073d on 2 Nov 2026, not a manual audit.

How does StackGrade score deepseek-harness?

deepseek-harness scores 57 out of 100 in Week 45: #17 of 52 tracked tools overall and #7 in Coding agents. The score combines maintenance (44), adoption (97) and docs (18) as percentiles among all 52 tracked tools; community (20% weight) is not measured yet, so the score uses the other 80%. It is not a hands-on test and it is separate from the safety label.

What are the alternatives to deepseek-harness?

The highest-scored other tools in Coding agents this week: Gemini CLI (70, Caution), OpenCode (70, No issues found), OpenHands (68, Caution), Claude Code (65, No dependencies scanned). StackGrade has not tested them hands-on.

What licence does deepseek-harness use?

The licence listed for deepseek-ai/deepseek-harness is MIT. Read the licence text before commercial use.

Compare and use it

All facts and sources
Type
AI tool
License
MIT
Language
TypeScript
Created
13 Aug 2026
Owner
deepseek-ai (Organization)
Forks
32,612

GitHub description: “DeepSeek Harness: Everything is a Plugin.”

Sources: github.com/deepseek-ai/deepseek-harness, api.github.com/repos/deepseek-ai/deepseek-harness, raw.githubusercontent.com/deepseek-ai/deepseek-harness/maste. Fetched 2 Nov 2026.

Know when deepseek-harness changes label

One email a week: the new top 10, the biggest score changes and every safety label that changed.

Free. Double opt-in: you confirm by email first, unsubscribe in one click.