← Back to Clusters

Plugin Management and Security Enhancements

This cluster focuses on improving plugin management and enhancing security measures within the OpenClaw framework.

36 PRs
fix plugins security Representative: #8500
# Title Author Created GitHub
2416 chore: add detect-secrets baseline and loc check zeroslashagency 2026-01-26 View
2753 fix: Support nested packages in pnpm-workspace.yaml (#2745) HarshalJain-cs 2026-01-27 View
7204 Plugins: default non-bundled plugins off veganmosfet 2026-02-02 View
7835 CI: add dependency security audit job M00N7682 2026-02-03 View
8500 fix: Remove workspace:* from devDependencies in voice-call plugin rep ImBIOS 2026-02-04 View
8515 Lobster: disable Windows shell fallback coygeek 2026-02-04 View
8526 fix(docker): copy extension package.json files before pnpm install robertcorreiro 2026-02-04 View
9196 Fix: Use local plugins for unpublished npm packages vishaltandale00 2026-02-05 View
11096 fix(plugins): require explicit trust for workspace and external plugins T1mn 2026-02-07 View
11454 fix(plugins): remove workspace:* from extension dependencies AnonO6 2026-02-07 View
12028 fix: normalize // to / for Matrix client escaped commands githabideri 2026-02-08 View
12103 fix: add missing zod dependency to 7 extensions mcaxtr 2026-02-08 View
12386 chore(deps): update Hono to v4.11.9 dikshithreddym 2026-02-09 View
12387 security: fix SSRF vulnerability in matrix-bot-sdk dikshithreddym 2026-02-09 View
12849 fix(plugins): fallback bundled channel specs when npm install returns 404 vincentkoc 2026-02-09 View
13254 fix: harden archive extraction and plugin update rollback lawyered0 2026-02-10 View
13713 installers: clean temporary dirs after archive installs lawyered0 2026-02-10 View
16140 fix: convert installable extension deps from workspace:* to peerDependencies ... battman21 2026-02-14 View
18418 fix(plugins): improve duplicate plugin ID warning with actionable guidance BinHPdev 2026-02-16 View
18730 fix(plugins): suppress duplicate ID warnings for intentional origin overrides cedillarack 2026-02-17 View
18791 docs: add FogClaw plugin docs for official OpenClaw listing sidmohan0 2026-02-17 View
19502 Docker: install extension workspace deps for memory-lancedb Hua688 2026-02-17 View
19735 fix: inject CLAWD_URL/CLAWD_TOKEN env vars in Lobster plugin MisterGuy420 2026-02-18 View
19941 fix(nostr): move openclaw from devDependencies to peerDependencies AustinEral 2026-02-18 View
20025 Fix Matrix messages silently dropped due to zero startup grace Clawborn 2026-02-18 View
20055 fix(plugins): strip workspace:* dev-deps before npm install openperf 2026-02-18 View
20278 Fix/matrix missing bot sdk dependency saurav470 2026-02-18 View
20360 fix(feishu): remove workspace protocol from published package metadata tanujbhaud 2026-02-18 View
20822 fix(config): deduplicate config warnings to prevent log spam marcodelpin 2026-02-19 View
21039 Fix npm-spec plugin installs when npm pack output is empty graysurf 2026-02-19 View