The old ownCloud marketplace had a backend. A database. A server. An admin interface. Infrastructure to maintain, dependencies to patch, and a single point of failure between a publisher and the people who wanted their app.<\/p>\n
The new one has none of that.<\/p>\n
marketplace.owncloud.com<\/a> is live with (as of this publication) 42 apps, 324 releases, 36 publishers, and 8 categories, along with 13 web extensions (and growing!). The marketplace is a static site backed by a public GitHub repository at github.com\/owncloud\/marketplace<\/a>. Every app in the catalogue is a structured entry in that repository. Every release is versioned in Git. Every update goes through a PR.<\/p>\n To publish an app, you submit a pull request using the template at .github\/pull_request_template.md. The review happens on GitHub. The merge lands the app in the catalogue. The static site regenerates. Done.<\/p>\n This is the same contribution model as everything else we’ve built under the OSPO<\/a>: code goes through Git, review happens in the open, there is no hidden approval process or privileged backdoor. The marketplace is auditable the same way the software it distributes is auditable.<\/p>\n The security properties follow from the architecture. A backend-free static site has a dramatically smaller attack surface than a traditional app store. No server to compromise. No database to exfiltrate. No session tokens to steal.<\/p>\n The marketplace covers both platforms. The Apps<\/strong> <\/a>section lists extensions for ownCloud Classic<\/strong> \u2014 42 apps spanning:<\/p>\n The Web Extensions<\/strong><\/a> section is where oCIS extensions<\/strong> live\u2014 including everything from our internal AI sprint this week:<\/p>\n All discoverable by any oCIS administrator looking to extend their deployment.<\/p>\n 42 apps across 8 categories. A sample:<\/p>\n 36 publishers ranging from individual contributors to organisations like epiKshare GmbH, Afterlogic Corp., and ownCloud itself.<\/p>\n
\nAll with no backend, no database, and no server-side processing of any kind. The Git repository is the source of truth. The catalogue is static JSON. Publishing an app is a pull request.<\/p>\nHow It Works<\/h3>\n
Two Platforms, One Catalogue<\/h3>\n
\n
\n
What’s in the Catalogue<\/h3>\n
\n
Publishing Is a PR<\/h3>\n