Don't get me wrong, I would love for another CMS to overtake WordPress and the features EmDash has launched with around plugin security is great.
I've spent a lot of time browsing and using plugin/extension marketplaces. One of the main questions that you have when deciding on a plugin is your last one question - specifically the quality of the plugin and if does what it says it will do. But when I look at the EmDash marketplace, there is almost no way to judge the quality of the plugin (especially the UI/UX without screenshots) or if it actually does what it says it will do. And that is usually the first question you ask before going into the security and maintenance. Because if it looks terrible, slows down your site, and doesn't really work - who cares if it's maintained and secure?
All of the plugins I looked at have a "view source" button that takes me to a github repo (though the payments plugin link is broken). Presumably you could install the plugin from source as well... would that not be a better signal than number of users?
At this point you could probably just run it through an LLM yourself and ask it if it does what it claims, if the code is straightforward, or if there are any seemingly obfuscated bits. If something is on a safety-critical path, you should probably do the review yourself.
This is a valuable insight - and you are probably in the majority. Thanks for taking the time to explain, this is probably valuable user research for the EmDash folks :)
I've spent a lot of time browsing and using plugin/extension marketplaces. One of the main questions that you have when deciding on a plugin is your last one question - specifically the quality of the plugin and if does what it says it will do. But when I look at the EmDash marketplace, there is almost no way to judge the quality of the plugin (especially the UI/UX without screenshots) or if it actually does what it says it will do. And that is usually the first question you ask before going into the security and maintenance. Because if it looks terrible, slows down your site, and doesn't really work - who cares if it's maintained and secure?