Each plugin can receive 100 points across four 25-point dimensions. A higher score means more public evidence, not proof of safety or suitability.
Four dimensions
Install evidence
Detect manifests, patch paths, and install commands.
Maintenance
Review recent pushes, archive status, and ongoing activity.
Documentation
Check README, license, configuration, permissions, and removal steps.
Adoption
Summarize stars, forks, and curated inclusion as supporting context.
Clear limits
Try plugins involving browsers, terminals, files, credentials, or external services in an isolated environment first.
Collection pipeline
- 01Discover
Read curated lists, GitHub topics, and user submissions.
- 02Deduplicate
Create stable identities from repositories and subpaths.
- 03Inspect
Read public metadata, manifests, README files, and licenses.
- 04Store
Write to SQLite in a transaction and preserve the last good state on failure.
Corrections
Scheduled jobs refresh automated fields while editorial notes remain separate. Authors can resubmit a repository to refresh its public evidence.
Submit a correction