Community Extensions
This is a directory, not a marketplace. Every row is added by a person who
checked the package against the Community Extension
Checklist and confirmed each item by
hand. Nothing here is populated by scanning pub.dev, and no listing is
generated or verified automatically — a stale row is a review problem, not a
tooling one.
Directory
| Package | pub.dev | Source | Maintainer | Purpose | Supported Maat / Dart | Last verified |
|---|---|---|---|---|---|---|
| (none yet) |
No package is listed yet. See below for why the one extension in this repository is not the exception.
Why maat_audit_trail is not listed
examples/extension_package (published as
maat_audit_trail) is this repository’s own worked example of a Maat
extension: public-API-only, namespaced routes and views, authorization
checked on every read, a documented install/opt-in, no hidden behavior, a
license and changelog, a semantic version, and passing dart analyze --fatal-infos, dart test, and dart pub publish --dry-run — checklist
items 1 through 6 and 8.
It does not clear item 7. This repository (gaitco/maat-monorepo, which the
package’s repository: field in pubspec.yaml points at) has no
SECURITY.md and documents no security contact anywhere in README.md or
docs/README.md. There is no real path for someone to privately report a
vulnerability in this package, so listing it here would claim a checklist
item the repository cannot back up.
Treat maat_audit_trail as the reference implementation for how to author
an extension — read its README
and example — not as a
directory entry. Creating SECURITY.md for this repository is tracked as
its own, separately blocked publication requirement, independent of this
task; it is not something a docs change can invent on its own authority.
Submitting a package
Once a package clears every item in the Community Extension Checklist, open a pull request that adds one row using this block, filled in and with the checklist evidence linked (a CI run, or the local commands from item 8):
| `<package_name>` | https://pub.dev/packages/<package_name> | <source repository URL> | <maintainer name or handle> | <one-sentence purpose> | Maat <range> / Dart <range> | <YYYY-MM-DD> |A reviewer confirms each checklist item before merging — this directory stays small and human-reviewed on purpose.