diff options
| author | Ogulcan Celik <ogulcancelik@gmail.com> | 2026-06-15 20:29:29 +0300 |
|---|---|---|
| committer | Ogulcan Celik <ogulcancelik@gmail.com> | 2026-06-15 20:29:29 +0300 |
| commit | 41d1c14e0784cf63dc4cddda21c7e5fd99813b24 (patch) | |
| tree | 19d01f6429b0d327617900637dd43c604e2d4a29 /website/src/content/docs/marketplace.mdx | |
| parent | 61ede89b2e724f0cdc7081b9c448c3f64fed85c0 (diff) | |
docs: add plugin trust and security guidance
Diffstat (limited to 'website/src/content/docs/marketplace.mdx')
| -rw-r--r-- | website/src/content/docs/marketplace.mdx | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/website/src/content/docs/marketplace.mdx b/website/src/content/docs/marketplace.mdx index be662b8a..f07b8f87 100644 --- a/website/src/content/docs/marketplace.mdx +++ b/website/src/content/docs/marketplace.mdx @@ -33,5 +33,7 @@ declared `platforms`, and a link back to the source repository. Getting that manifest metadata right today is what makes your listing accurate later. Declare `platforms` honestly, because the index will use it to show where a plugin runs. -Plugins stay ordinary GitHub repositories. The marketplace is a discovery and -trust layer on top of the same `herdr plugin install` path you can use now. +Plugins stay ordinary GitHub repositories. The marketplace is a discovery layer +on top of the same `herdr plugin install` path you can use now. A listing makes a +plugin easier to find; it does not mean Herdr has reviewed it, so the +[trust guidance](/docs/plugins/#trust-and-security) still applies. |