04/
Who keeps the registry honest.
/01
Verification pass
Every submission is reviewed by two maintainers on a rotating roster. They check the manifest, lint the plugin, run it against a sandbox forum, and verify a GPG signature from the author.
/02
Last security audit
2025-09-02 — full sweep of the top 200 plugins, run with the IchigoBBS 8.4 fuzz harness. Two plugins were deprecated as a result; 14 received security backports.
/03
240+ contributors
Maintained by the 14-person core team plus 240+ verified contributors on GitHub. Average PR merges per week across the registry: 31.
/04
Internet Archive mirror
The full registry (4,200+ archived threads and changelogs since 2005) is mirrored to the Internet Archive. Endorsed on the IA's community-software preservation list since 2019.