From 41d1c14e0784cf63dc4cddda21c7e5fd99813b24 Mon Sep 17 00:00:00 2001 From: Ogulcan Celik Date: Mon, 15 Jun 2026 20:29:29 +0300 Subject: docs: add plugin trust and security guidance --- website/src/content/docs/marketplace.mdx | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'website/src/content/docs/marketplace.mdx') diff --git a/website/src/content/docs/marketplace.mdx b/website/src/content/docs/marketplace.mdx index be662b8a..f07b8f87 100644 --- a/website/src/content/docs/marketplace.mdx +++ b/website/src/content/docs/marketplace.mdx @@ -33,5 +33,7 @@ declared `platforms`, and a link back to the source repository. Getting that manifest metadata right today is what makes your listing accurate later. Declare `platforms` honestly, because the index will use it to show where a plugin runs. -Plugins stay ordinary GitHub repositories. The marketplace is a discovery and -trust layer on top of the same `herdr plugin install` path you can use now. +Plugins stay ordinary GitHub repositories. The marketplace is a discovery layer +on top of the same `herdr plugin install` path you can use now. A listing makes a +plugin easier to find; it does not mean Herdr has reviewed it, so the +[trust guidance](/docs/plugins/#trust-and-security) still applies. -- cgit v1.2.3