notepad-plus-plus / notepad-plus-plus/nppPluginList
Vetting of plugins
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 1.7k
- Forks
- 491
- Avg merge
- 2d 4h
- Merged PRs (30d)
- 22
Description
Are the plugins added to this list vetted at all?
Notepad++ makes sure the list of plugins is signed so it knows it is downloading the expected bytes, but is any if the DLL files etc actually ran through a virus checker at all or something?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the nppPluginList repository and how the signed plugin list handles its DLL entries. The issue names no files or tests, so first determine whether plugin vetting or virus scanning is currently documented or implemented; done would require a clearly documented or established vetting process.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100