Store
Trust and safety
What is checked before something appears in the Store, and what a listing does and does not assert.
Store
What is checked
Publishing runs through a certification gate before a listing goes live.
- Licence
- A package must declare a licence the Store accepts.
- Secrets
- Packages are scanned so credentials cannot ship inside a published asset.
- Paths
- Package contents must stay inside the package, with no writing outside the install target.
What a listing does not assert
Stated so listings are read for what they are.
- No ratings or sales figures
- The Store shows no review scores, download counts or revenue figures, because inventing them would be the easiest thing on the page to fake.
- Verified badges
- Applied to curated public-domain libraries only, not to individual community uploads.