universal-plugin-hub
One hub that manages Claude Code, Codex and DSH plugins, skills and MCP connectors together.
Version 1.3.1 of universal-plugin-hub, last published 2026-11-13; the install command and the range come from its own manifest.
Install
dsh plugin add universal-plugin-hub writes one dependency line into the profile manifest; pnpm then unpacks it under $DSH_HOME/profiles/<name>/node_modules.
dsh plugin --profile web add universal-plugin-hubCompatibility
engines.dsh in universal-plugin-hub declares >=0.1.5-rc.1; run dsh --version and compare it, because outside that range the CLI skips the plugin at boot and prints the requirement instead of booting.
If two plugins fight
It writes plugin entries into the profile package.json from git sources, which is the same file dshmarket edits. Two installers means the second one can overwrite the first one's entry without knowing it existed.
Who made it
Author: Ultmebius. Repository: https://github.com/Ultmebius/universal-plugin-hub. Package page: https://www.npmjs.com/package/universal-plugin-hub.
After install
It declares @deepseek-ai/cordis as a peer and renders a plugin browser in the left sidebar; after dsh plugin add universal-plugin-hub, dsh --profile web --dump-config lists the row that mounts it.
Files it touches
No storage peer appears in the manifest of universal-plugin-hub, so the dependency line in $DSH_HOME/profiles/<name>/package.json is the only file you can point at; the package description names nothing else.
Removing it
Removing universal-plugin-hub is the mirror command, dsh plugin --profile web remove universal-plugin-hub. Its manifest declares no storage peer, so it writes nothing under $DSH_HOME; removing it leaves no files behind.
Common questions
Does it collide with dshmarket?
For universal-plugin-hub the recommendation is dshmarket: It patches dsh-settings rows and keeps its inventory in the settings surface, which is what the profile already owns.
Which dsh versions load it, and what happens outside that window?
On >=0.1.5-rc.1 the CLI loads universal-plugin-hub; outside it, boot stops with the requirement instead of running the plugin. dsh plugin allow-version universal-plugin-hub is the per-package override if you accept the risk.