OpenCommunityMIT licensed
for EmDash plugins
and themes.
Browse what's been built. Publish what you've made. Every release is sandboxed, scanned, and AI-reviewed before it ships— never silently published.
Under active developmentFollow on GitHub
before it ships.
Every version that lands here has passed a fail-closed pipeline. If the audit can't run, the version doesn't publish. No silent escapes, no exceptions, no “trust me”.
- Sandboxed by default
- Plugins run in isolated Worker sandboxes. They declare what they touch in a manifest. Nothing else.
- Statically scanned
- Every uploaded archive is unpacked and scanned for the obvious failure modes before a human ever sees it.
- AI-reviewed in context
- A model reads the code against the manifest. If it can't parse the verdict, the version is rejected, not auto-passed.
- Open and inspectable
- The marketplace, the audit pipeline, and every verdict log live in a public MIT-licensed repository. Audit our auditing.
emdashcms.org is the public home for the ecosystem around EmDash CMS: directories, install docs, developer references, contribution paths, audit policy, feeds, and machine-readable API surfaces.
Understand what this project is, how it relates to the core CMS, and where support, policy, and security reports live.
Get the core CMS, connect this marketplace, install trusted extensions, and find the right path for your role.
What EmDash is, how plugins work, what manifests declare, and how capability consent protects sites.
Install help, plugin support routes, publisher guidance, status checks, security reports, and project issues.
Register a plugin or theme, upload a bundle, wire GitHub releases, and understand review outcomes.
The scanner rules, AI review model, trust tiers, and public rejection history behind each release badge.
Public read endpoints, OpenAPI, Atom feeds, llms.txt, and MCP tools for EmDash sites and agents.
The marketplace should feel inspectable while it grows. Follow what shipped, what was rejected, what needs help, and how the community standards are enforced.
Permanent Sunday snapshots begin as soon as catalog activity lands.
Public counts for review outcomes, reports, deprecations, and catalog health.
What exists now, what improves next, and what the project will not claim before it is real.
Practical ways to publish, test, document, review, moderate, and build the registry.
Free to install. Free to publish. MIT licensed and running on Cloudflare's free tier so the marketplace stays cheap to host and easy to fork.