Addon-Repository ideas?

phreak

Hi @Linc‌, @Tim and @Adrian,

I have some small suggestions regarding the Addon repository.

1.)
The warning message above every addon that's not made by the Vanilla core unit is a bit strong in its expression, don't you think?

"Warning! This community-contributed addon has not been tested or code-reviewed. Use at your own risk."

What about something more friendly to users that bug in for the first time to Vanilla. Something like:

"This is a community-contributed addon and has not been tested or code-reviewed by the Vanilla core team."

2.)
By the way, do we have Addons in the repository where there is knowledge of security risks? Or a discussion about?
Should we flag them in any way, next to the version number?

3.)
Can i help code/CSS a mobile version of the repository? The current mobile view is quite frustrating.

4.)
Bigger icons in the Addon-List-View would be great. Please, please, please

Maybe other users have suggestions too.

Greetz, phreak

peregrine

By the way, do we have Addons in the repository where there is knowledge of security risks?

Yes we do.but there are tweaks in the discussions for some that prevent it.

and yes they are "using at their own risk". they use all software at their own risk, it just makes it clear Vanilla is not responsible for checking everyone's plugins. The community is responsible.

But if people indiscriminately load plugins without reading the comments they are "using at their own risk".

e.g.
http://vanillaforums.org/discussion/comment/163979/#Comment_163979

maybe they should be pruned, if the author didn't update after being alerted to a security risk.

there may be a few others but you would need to search for XSS and read the comments.

Perhaps a system where...

if someone finds a security risk and can demonstrate an example exploit to the author in a private message and the author of the plugin does not fix within a "reasonable time" then vanilla staff should be alerted and it should be deleted . Just saying something "looks insecure I think" without showing an exploit is not really very valid though.

thumbs sideways.

Bleistivt

It has been said here many times before, but old plugins that don't work anymore should be removed (or hidden).

At this time basically everyting from @peregrine's list that is red or very, very old.
https://docs.google.com/spreadsheet/pub?key=0AvSnB6M4Z-EIdGx5UnNPN3Y3WXVwcFhicnJnazNvbWc&single=true&gid=0&output=html

Also a github integration would be pretty slick.

hgtonight

@Bleistivt said:
It has been said here many times before, but old plugins that don't work anymore should be removed (or hidden).

At this time basically everyting from peregrine's list that is red or very, very old.
https://docs.google.com/spreadsheet/pub?key=0AvSnB6M4Z-EIdGx5UnNPN3Y3WXVwcFhicnJnazNvbWc&single=true&gid=0&output=html

Also a github integration would be pretty slick.

Nice pointing to the list. There was some effort to review all the plugins, but it kind of petered out.

More discussion here: http://vanillaforums.org/discussion/23323/lets-talk-about-improving-vanillas-addons