[SPIGOT-7158] Custom repository for plugin libraries Created: 16/Sep/22  Updated: 25/Dec/24

Status: Open
Project: Spigot
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: New Feature Priority: Minor
Reporter: Astro angelfish Assignee: Unassigned
Resolution: Unresolved Votes: 0
Labels: libraries, plugin, plugin.yml, pluginmanager
Environment:

+---(astro-angelfish@crystal)-[/home/astro-angelfish/Minecraft/plugin-dev/Carbon]-[0]
+-$ uname -a
Linux crystal 5.19.8-arch1-1 #1 SMP PREEMPT_DYNAMIC Thu, 08 Sep 2022 18:07:42 +0000 x86_64 GNU/Linux



>pl
[21:16:41] [Server thread/INFO]: Plugins (3): LuckPerms, CodeBoxRuntime, FishLib
>ver
[21:16:47] [Server thread/INFO]: This server is running CraftBukkit version 3586-Spigot-4c157bb-5cc9c02 (MC: 1.19.2) (Implementing API version 1.19.2-R0.1-SNAPSHOT)
[21:16:47] [Server thread/INFO]: Checking version, please wait...
[21:16:48] [Thread-11/INFO]: You are running the latest version

Version: 1.19.2
Guidelines Read: Yes

 Description   

The libraries included in plugin.yml is pretty convenient. But it would be better if allowing plugins to define a new repository to load their libraries. Notice that there might be security issues when the plugin try to download the libraries from custom repositories.

 Comments   
Comment by mfnalex [ 31/Jan/23 ]

A plugin could downlod and load random classes from anywhere anyway, though. It‘s just less convenient.

Comment by Parker Hawke [ 23/Sep/22 ]

As useful as it would be to have repositories defined in the bukkit.yml, there are still the same security implications because a plugin can edit that file as well.

Comment by Black Hole [ 16/Sep/22 ]

Private libraries should be shaded in plugins. Private repos for plugins offer too much security implications.

However it might be a nice feature to define such repositories in bukkit.yml for use in private plugins.

Generated at Fri Apr 11 16:00:45 UTC 2025 using Jira 10.3.3#10030003-sha1:d220e3fefc8dfc6d47f522d3b9a20c1455e12b7b.