In reply to John Layton.

That will be something they need to address. If malicious code starts to appear on their plugin, then it will be pulled. They will need reviews, guidelines, etc. We expect plugin authors to adhere to the standards set. If they cannot do that, then they won't last long.

They have created a repository for a new kind of "thing". We're open to new ideas. But we're not committed to them. We can always remove a plugin from our systems, or require that they uphold a set of standards. If they fail to act when bad things happen, or if they fail to maintain their systems, then they are just as subject to being delisted as any other plugin is.

Being allowed in means you have a working service. Remaining there is a commitment that you need to hold up your end on too.

I tend to take a long view on these things. If it works, great. But most things don't, so it will need more work. If they do that work, great. If not, welp... Nice try and such. But I'm not going to require perfection in the first attempt. Reality is a series of fixing things. And then fixing them again. That's just how the world is.