Skip to content

Refresh the community marketplace listing — it is pinned to a stale sha #297

Description

@sgraczyk

Problem

Our entry in anthropics/claude-plugins-community pins a bare commit sha:

{"name": "spec-first",
 "description": "Claude Code plugin that guides you from requirements to working code — ...",
 "source": {"source": "url",
            "url": "https://github.com/bitcraft-apps/spec-first.git",
            "sha": "c56860e7469602394f367da258f5f740ee351831"}}

c56860e is chore(main): release 1.3.0, dated 2026-03-16 — the submission date. As of 2026-08-04, main is 48 commits ahead at VERSION 1.3.1.

A bare sha never updates. So every user who installs spec-first@claude-community gets March code. They do not get /sf:implement --isolate, anything under docs/, or five months of fixes.

Other entries in the same marketplace.json use "ref": "main" or "ref": "v1.0.1", so they track a moving target. Ours does not.

The listed description is also stale. It opens "Claude Code plugin", but the plugin now installs on 15+ hosts through .agents/skills — see docs/supported-hosts.md.

Action

Resubmit through the Console form: https://platform.claude.com/plugins/submit

The clau.de/plugin-directory-submission link now 302s to the docs page. The other live route,
https://claude.ai/admin-settings/directory/submissions/plugins/new, needs Team/Enterprise
directory-management access, which we do not have — so the Console form it is.

Ask for the pin to be re-pointed at current main and the auto-bump re-armed. Do not ask for a
tracking ref (see Corrections below). Supply a description that is not Claude-only.

Pull requests against the mirror repo are closed automatically — every change flows through the
internal review pipeline, so the form is the only route.

Acceptance Criteria

Notes

Checking status: https://claude.ai/settings/plugins/submissions. No confirmation email arrived for the March submission, so expect to verify by reading marketplace.json directly.

Corrections

Two premises above were wrong. Recorded so nobody re-derives them.

A tracking ref is not on offer. The docs state approved plugins "are pinned to a specific commit
SHA … and CI bumps the pin automatically as you push new commits to your repository". Of 2298
entries in the community catalog, 1892 carry a bare sha; the 402 with a ref are nearly all
git-subdir sources and carry a sha alongside it anyway. The sha pin is the design. Our actual
defect is that the automatic bump has not fired since 2026-03-16 — so the ask is "re-arm the bump",
not "give us a ref".

The submission URL moved, as covered under Action.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    priority:highImportant features or serious bugstype:distributionMarketplace and distribution

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions