Unclear The finding does not say what makes a plugin "record-bound".
This build contains code for a plugin directory marketplace called anthropic-plugin-directory. A marketplace is a catalogue you can install plugins from. The part that would supply the directory is an empty placeholder, so the feature always reports itself as unavailable. The new code includes:
- a
pluginDirectorysource type - a
PluginDirectoryUnavailableError - tidying of
github,urlandgit-subdirplugin addresses
There is also a new check before a plugin is installed. It refuses with the message 'this build of Claude Code cannot verify' in two cases: when the plugin is record-bound, or when its ID looks like a scoped npm package name.
You cannot use this directory yet. The install check is the part that may affect you: a plugin whose ID looks like a scoped npm name will be refused with that message.
The finding does not say what makes a plugin "record-bound".