New shell script policy for the extensions directory

I’m implementing a new policy strongly discouraging Shell Script actions for PopClip Extensions Directory submissions.

Unless there’s a good reason for using a shell script, an extension must use JavaScript (or TypeScript). Submissions will be rejected if they needlessly use a shell script where JavaScript can achieve the same result. (This prohibits Python, Perl, Ruby etc. not just Bash/Zsh.)

The rule exists because shell scripts run with full user privileges and can do anything on the user’s Mac, which makes them harder to review and much riskier to trust. For more information and guidance, please see https://www.popclip.app/extensions/submit#shell-script-policy.

This doesn’t affect extensions you create for your own personal use, only ones you want to submit to the directory.

Links: