Require LLM-generated themes & plugins to be tagged as such

I am not concerned at all about “how a plugin was formed” and if the craft person used a pencil vs a pen.

“No AI here”, is not something that gives me even an ounce of extra confidence when it comes to installing a theme or plugin.

However… there is a much more serious problem we need to tackle at CDCK.

Core plugins and source code at Discourse is security scanned regularly, when a person installs a supported channel they have confidence around how secure the code is.

The third party plugins and themes here are “the wild west”, anyone can contribute, we do not security scan them or ensure they are following best practices. This puts the community at risk.

I would like to reach a world where “version XYZ” of theme was at least automatically scanned to give self hosters at least some confidence.

So my vision here is the complete opposite :slight_smile: require versions of third party themes and plugins pass some sort of AI scan prior to being advertised here.

5 לייקים