What is it? An official Pocketmine plugin store, without scam risk. Why would it be a good idea? At the time of writing this, buying and selling plugins carries a great risk, today when I entered discord I saw a message from a user who reported having been scammed by a person when trying to acquire a plugin, it could also be the case that deliver the product but never make the payment. The purpose of this proposal is to address this problem, fix it, and provide a benefit to the development of pmmp. How would this store work? First, both sellers and buyers must have a github and paypal account. Register to be a seller. Sellers must pass a filter either a google form, to check their knowledge of php and the PMMP API, their github will be reviewed and their public repositories will be analyzed (Quality code and experience in developing plugins for pmmp). People whom the Pocketmine Team deemed suitable will be given access to a section on the poggit page where they can upload their plugins. Plugin upload: The loading of plugins will be quite similar to the current one to upload plugins to poggit, Poggit reviewers will be in charge of reviewing the source code, that it complies with the established rules and that the price is appropriate to the product to be delivered. The seller will establish how long the buyer may be receiving updates, whether the purchase only includes 1 month of support or up to 1 year. Poggit reviewers will agree not to filter plugin code. Purchase interface: The plugin purchase interface would be quite similar to the current one in poggit, with the difference that the buyer does not have access to the source code and that when he wants to download the plugin, he has to log in with PayPal to make the purchase. Buy plugins: When the buyer has already made the payment via paypal, they will be redirected to the plugin page, where they will be able to download the plugin and an email will also be sent automatically thanking them for their purchase and attaching the plugin. the buyer will make it available in the reviews section so that he can comment on what he thought of the plugin and can give him a rating. From the purchase 10 to 15 percent of the proceeds would go to the Pocketmine team and the rest to the plugin author. After-sales: The buyer receives updates depending on the time that the seller chose, in the reviews section you can suggest features for the plugin and you can return to the page to download the plugin as many times as you want while it is still in the period to receive updates. Advantage: - The risk of being scammed would be greatly reduced. - Poggit will already have an official section for the purchase / sale of plugins - There would be a profit out of this. It would be a favor if you want to modify or add things to this proposal.
Perhaps this could help. https://stackoverflow.com/questions/336057/best-solution-to-protect-php-code-without-encryption
Not true, Reviewers could still have access to the repository but indirectly using custom OAuth that allows poggit to see private repository. I’m young and I know too much information. I need to go out sometime
This has been discussed in the past, but most of the team agrees that we don't want the liability of dealing with people who do end up getting scammed anyway even by using such a platform (e.g. leaking sources). It adds additional workload for the team and doesn't guarantee any results, nor does it guarantee that we'll be compensated for the time (which would require significant adoption).