How we vet products
You are being asked to install executable software from a stranger on the internet. That deserves a real explanation rather than a badge, so here is exactly what happens.
1. The seller is approved first
Nobody can upload anything until a person has reviewed their application. There is no path where an anonymous account publishes software to this marketplace.
2. Uploads go straight into quarantine
Files upload directly to private storage under a randomly generated identifier. They are not reachable by anyone — not by other sellers, not by buyers, not by our own web servers — until they clear review.
3. Scanning happens in a disposable sandbox
A throwaway container with no network access, no credentials, and no route to our database reads the file, analyses it, writes a result, and is destroyed. We check file types by content rather than by extension, validate archives against decompression bombs and path-traversal tricks, record cryptographic hashes, and extract code-signing metadata.
4. We never run your download
Analysis is entirely static. At no point does anyone — human or automated — execute, install, or load an uploaded plugin. Running unknown software to find out whether it is safe is not a security process.
5. A person makes the decision
Automated checks produce evidence and rank the queue. They do not approve anything. A named reviewer reads the findings and decides, and that decision is recorded against their account. Our tooling may summarise and prioritise, but it is never the final authority on whether software is safe.
6. Updates start the process over
An approved build is never silently replaced. Every upload creates a new immutable version that is scanned and reviewed again, so a seller cannot swap clean bytes for something else after approval.
What this does not mean
Your privacy, and sellers’ intellectual property
We do not submit sellers’ files to public multi-engine scanning services. Doing so would leak unreleased work to third parties. Any future third-party scanning integration would require a documented privacy review and clear disclosure to sellers first.