Accessibility Mod Manager — Plugin Registry

This repository hosts the central plugin registry for the Accessibility Mod Manager.

What's here

• plugin-registry.json — the list of approved plugins.
• plugin-registry.json.sig — RSA-PSS signature over the JSON, generated with the maintainer's private key. The shipped app verifies this signature against an embedded public key before trusting the registry.

The actual registry served to users is the GitHub Release artifact, not the file in this main branch. Releases are signed and published manually by the maintainer (signing happens offline; the private key never touches this repo or GitHub Actions).

Want your accessibility mods listed?

Open an issue using the Plugin Application template. See CONTRIBUTING.md for what's required.

How users get updates

The Accessibility Mod Manager fetches:

https://github.com/RealAmethyst/accessibility-mod-manager-registry/releases/latest/download/plugin-registry.json

releases/latest/download/... automatically resolves to the most recent release, so once a plugin is added and a new release is published, all users see it on next refresh.

Security model

See the Security & Architecture Guide in the main app repo for the full trust model. In short:

• The registry is signed with an RSA-PSS key controlled by the maintainer.
• Each plugin's package downloads are independently SHA256-verified.
• Plugin authors host their own content; this repo only contains metadata.

License

Registry data (this JSON) is licensed under CC0 / public domain. Plugin content linked from the registry is licensed by each plugin author separately.