Plugin registry

Extend the CLI without forking it.

Third-party subcommands installed from a signed registry.yourspace plugin install lighthouseadds yourspace lighthouse to your CLI; verified plugins run with reduced privileges + signature checks every run.

How it works

Browse + install

Find a plugin here or via yourspace plugin search; install with plugin install. Signed packages from registry.yo.urspace.net.

Run as a subcommand

Plugins integrate as first-class subcommands — yourspace lighthouse feels identical to yourspace deploy. Same flag conventions, same JSON output mode.

Pin per project

yourspace.yml carries a plugins: block declaring exact versions; CI installs match developer machines without lock-file ceremony.

yourspace lighthouseverified@yourspace-community

12.4k847

Run Lighthouse against the deployed site, fail the deploy if performance / accessibility scores drop below configured thresholds.

yourspace linkcheckverified@yourspace-community

9.1k612

Crawl the deployed site for broken internal + external links; emit a structured report and exit non-zero on found breaks.

yourspace a11yverified@yourspace-community

7.8k534

axe-core scan against the deployed site, scoped to declared routes. Outputs WCAG findings as JSON or as a human-readable report.

yourspace ci-commentverified@indievoss

5.2k298

Post deploy preview URLs and audit summaries as a PR comment on GitHub / GitLab / Forgejo. Idempotent updates on re-run.

yourspace warmup@perflab

3.4k201

Pre-warm the edge cache after a deploy by replaying a configurable URL list. Useful for sites with heavy first-paint payloads.

yourspace sitemap-diff@elsabettesi

2.1k147

Compare the sitemap.xml of the previous deploy vs the current one; flag added / removed URLs and emit a diff report.

yourspace audit-headersverified@hardlysecure

4.7k356

Verify Content-Security-Policy, X-Frame-Options, and HSTS posture across declared routes. CI-friendly output.

yourspace blue-green@indievoss

1.8k189

Stage the deploy on a preview URL, run a configurable smoke test, then promote to production atomically. Rollback in one command.

Publishing a plugin

Plugins are Go binaries (or thin shell wrappers) that follow the CLI's flag convention and structured-output contract. Publishing to the registry is yourspace plugin publish ./your-plugin; the registry signs the package with a per-author key and distributes via the same go-install module-proxy substrate the main CLI uses.

Verified status requires a one-time review against the plugin guidelines (signature posture, leak-scan compliance, customer-docs quality bar). Unverified plugins still install but warn at install-time. The verification process is documented at /docs/plugins#publishing.

Plugin authoring guide