How trust works

Anyone can publish on PGB Marketplace. To help you decide, every package shows a few separate signals. They answer different questions, so one never implies another.

Trust labels

• Official

  Published by PGB itself.

• Verified Publisher

  The publisher's identity has been confirmed by PGB. This says nothing about the package's quality.

• Security Checked

  This version passed PGB's automated package checks (structure, permissions, exposed secrets). It is not a manual review or a guarantee.

• Featured

  Chosen by the PGB team for the front page. It is an editorial pick, not a safety rating.

• Community

  Published by an independent author who is not verified. Read the permissions before you install.

Portability

How tied a package is to PGB.

Portable

Works on its own. No PGB services are needed, so you can take it anywhere.

Compatible

Follows open conventions and works best on PGB, with small adjustments needed elsewhere.

PGB Native

Built for PGB and uses PGB features directly.

Permissions and risk

Before you install, you see what a package can access, in plain words and with a risk level: low risk (for example, writing drafts), medium risk (reading your mail or data) or high risk (sending, sharing, changing data or contacting outside services). Packages that ask for high-risk permissions, or include executable code, stay unlisted until a PGB reviewer approves them.

Found something wrong? Open the package and use Report this package. Want to share your own? Start publishing.