Script mods execute code inside the game, so they never travel through the hub's open upload. They live in this repository, arrive as reviewed pull requests, and ship only from here.
Added
- Every mod declares itself — version, summary and category — so the launcher and the website can show a real version per mod rather than one number for the whole set.
- Each mod gets a page on the hub, with ratings, comments and screenshots like any other mod, and downloads that lead to the exact signed artifact.
- The launcher records what it installed and offers an update when the signed set moves past it.
Security
- The whole set is covered by one Ed25519 signature, checked against a key the launcher has built into it. A compromised storage bucket therefore cannot ship a payload: nothing installs unless the signed manifest says so.
- The website verifies that same signature independently before publishing anything from the set, so the signature is the authority rather than whoever made the request.