Fail-closed AI audit for a plugin registry (Workers AI and D1)

chrisjohnleah1 pts0 comments

emdashcms.org — A community marketplace for EmDash plugins and themes Skip to content

GitHub

Open

Community

MIT licensed

A community marketplace

for EmDash plugins<br>and themes.

Browse what's been built. Publish what you've made.<br>Every release is sandboxed, scanned, and AI-reviewed before it ships<br>— never silently published.

Start with EmDash Browse plugins Publish your work

Under active development<br>Follow on GitHub

Latest plugins

All plugins →

coleprice<br>Form Mailer<br>Reliable contact and lead-form email delivery for EmDash with spam protection and provider-based sending.<br>Passed 61 downloads email:send network:fetch

99points<br>EmDash Rating<br>Add star ratings to your posts and pages. Let visitors rate content with a beautiful 1–5 star widget.<br>38 downloads page:inject<br>ben-spp<br>SerpDelta<br>See which pages are climbing or dropping in Google — right in your EmDash admin.<br>59 downloads network:fetch

Audited<br>before it ships.

Every version that lands here has passed a fail-closed pipeline.<br>If the audit can't run, the version doesn't publish.<br>No silent escapes, no exceptions, no &ldquo;trust me&rdquo;.

Sandboxed by default

Plugins run in isolated Worker sandboxes. They declare what they touch in a manifest. Nothing else.

Statically scanned

Every uploaded archive is unpacked and scanned for the obvious failure modes before a human ever sees it.

AI-reviewed in context

A model reads the code against the manifest. If it can't parse the verdict, the version is rejected, not auto-passed.

Open and inspectable

The marketplace, the audit pipeline, and every verdict log live in a public MIT-licensed repository. Audit our auditing.

Read the full security policy →

More than a catalog.

emdashcms.org is the public home for the ecosystem around EmDash CMS:<br>directories, install docs, developer references, contribution paths,<br>audit policy, feeds, and machine-readable API surfaces.

About

Understand what this project is, how it relates to the core CMS, and where support, policy, and security reports live.

Start

Get the core CMS, connect this marketplace, install trusted extensions, and find the right path for your role.

Learn

What EmDash is, how plugins work, what manifests declare, and how capability consent protects sites.

Support

Install help, plugin support routes, publisher guidance, status checks, security reports, and project issues.

Publish

Register a plugin or theme, upload a bundle, wire GitHub releases, and understand review outcomes.

Security

The scanner rules, AI review model, trust tiers, and public rejection history behind each release badge.

Developers

Public read endpoints, OpenAPI, Atom feeds, llms.txt, and MCP tools for EmDash sites and agents.

A project you can follow.

The marketplace should feel inspectable while it grows. Follow what<br>shipped, what was rejected, what needs help, and how the community<br>standards are enforced.

Weekly digest

Permanent Sunday snapshots begin as soon as catalog activity lands.

Transparency

Public counts for review outcomes, reports, deprecations, and catalog health.

Roadmap

What exists now, what improves next, and what the project will not claim before it is real.

Community

Practical ways to publish, test, document, review, moderate, and build the registry.

Built by the EmDash community.

Free to install. Free to publish. MIT licensed and running on Cloudflare's free tier<br>so the marketplace stays cheap to host and easy to fork.

Find a plugin Publish your first one

emdash plugins publish community marketplace audit

Related Articles