How add-on review works

Checked automatically, when you upload

• addon.json follows the rules the apps' own loader uses: id, name, version, apps, the add-on API, license, entry and permissions.
• The package: one folder, at most 200 files and 5.0 MB unpacked, no links and no paths outside the folder.
• The license is one we can sign, and its text is in a LICENSE file.
• The code imports only the add-on's own files. Use of eval, Function or the network without asking for "network" is flagged for the reviewer.
• The version is new, and newer than the versions already here. A published version never changes.

Checked by a person

• The code does what the description says, and nothing it does not say.
• The permissions it states match what the code does. People see them before they add it.
• It talks to no server it does not declare, and sends nothing about the person or their drawings that they would not expect.
• It loads no code from anywhere else, and runs none it builds from text.
• Switching it off removes what it added, and drawings it touched still open without it.
• Every word a person reads is in its language file, and its help builds.
• Every file it includes from someone else carries a license we can sign.

How long it takes

We aim to review a version within 10 working days. A large add-on, or one that talks to a server, can take longer. You can see where each upload stands on your uploads page, and we email you when it is decided.

When a version is not approved

The reviewer writes why, and you see the note on your uploads page and in the email. Fix it and upload again with a newer version number. Nothing you uploaded is deleted.

When a published version is withdrawn

If a problem is found later (a security issue, a license problem, code that does something it did not say), the CadCraft team withdraws the version: the directory stops offering it, and the reason is recorded. Copies people already added keep working until they remove them; a fixed version can be uploaded as a new one.