Allow list: what is it and why is it needed?

Plugin development can be challenging. Mautic tries to make Plugin development as easy and smooth as possible, but there’s always a risk that a Plugin breaks Mautic entirely. There are plans to build several safeguards into the Marketplace which should prevent Mautic from crashing when installing a Plugin, however this is currently a work in progress. That’s why there is a so-called allowlist, meaning that Mautic’s core team has to approve your Plugin for it to show up in the Marketplace. This should ensure a higher level of stability for all Users of Mautic.

How does it work?

The process roughly looks like this:

  1. Plugin author fills out the Marketplace allowlist application form.

  2. Mautic’s core team reviews the submission.

  3. Once accepted, the core team adds the Plugin to the list at https://github.com/mautic/marketplace-allowlist.

Applying for the allowlist

As mentioned, you can use the Marketplace allowlist application form which gets reviewed by the core team. Once reviewed, the requester receives an update by Email. In the meantime, you can keep an eye on the allowlist at https://github.com/mautic/marketplace-allowlist to track the latest updates.

Moving forward: roadmap

  • November 2021: release Mautic 4.1 with allowlist enabled for the Marketplace

  • TBD: switch from allowlist to blocklist - all Plugins allowed except the ones that are incompatible or have security issues