Gradle is updating the plugin approval policy for plugins submitted to the Gradle Plugin Portal, effective today, to begin adding stronger security safeguards for plugin consumers.

Gradle Blog

Gradle is updating its plugin approval policy for new plugins submitted to the Gradle Plugin Portal. New submissions must have valid, non-misleading descriptions, project URLs, group IDs, and artifact IDs. Plugins with open-source repository URLs and SPDX-compatible licenses will be prioritized for approval. Existing plugins and builds are unaffected. Future plans include showing warnings for non-compliant plugins and adding automated checks.

Gradle Plugin Portal Approval Policy Update

Portal acceptance criteria in a nutshell #

What happens to plugins that don’t adhere to this criteria #