Use it now
Useful3 Signal3
Marketplaces can install a plugin by running a command that prints a directory path, with your consent.
What's wrong with this entry?
Anonymous. No account, no email.
commandtimeoutmodelinkcopy
What
Plugin sources now include command: a shell command that prints the absolute path of a plugin directory. It is re-resolved on install, on update and once per session in the background, takes an optional timeout, and a mode of copy or link decides whether the directory is copied into the plugin cache or used in place. Installing one asks for consent first.
Details
- The command string must be printable ASCII and short enough for the consent prompt to display in full, so it can be read before you approve it.
- Declining the consent prompt is recorded as
command_source_declined. linkmode serves the plugin from the producer's directory rather than a cache copy.
Evidence
command must be printable ASCII (letters, digits, punctuation, single spaces) with no runs of 4 or more spaces
Strings lifted out of the shipped bundle, so the claim above can be checked against them.