# Tilecast Marketplace The Tilecast Marketplace is the public directory of independently distributed Tilecast packages. Listings are reviewed as changes to the [Marketplace catalog on GitHub](https://github.com/gbyo/tilecast/blob/main/marketplace/catalog.json), so every addition and update has a visible history. A Marketplace listing tells Tilecast where a package comes from and which immutable OCI digest it refers to. **Listing is not a security audit.** Package signatures establish provenance and integrity; downloaded executable contributions still use Tilecast's external runtime boundaries. ## Available packages ## How the catalog works The GitHub catalog is the source of truth for listing metadata. Tilecast Server fetches that same file, validates it, and serves it to Studio, so this page and Studio always show the same reviewed listings. Package files are stored in OCI registries, not in the Marketplace catalog. ## Icons and screenshots A listing can include an icon and up to five screenshots. Studio shows the icon on the listing's card in **Explore**. Screenshots appear in a carousel on the listing's page, where you can select one to see it larger and step through the rest. Artwork is for presentation only. It has no effect on what a package is, whether it is trusted, or how it installs. Your browser never loads these images from GitHub or from the publisher. Tilecast Server fetches each image, checks that it is a normal web image of 1 MiB or less, and serves it to Studio. If an image is missing or fails to load, Studio shows the standard plugin icon instead. See [Marketplace](https://github.com/gbyo/tilecast/blob/main/docs/marketplace.md#artwork) for the exact rules. ## Get a package listed Marketplace submissions are ordinary pull requests that add or update listing metadata in `marketplace/catalog.json`. A listing identifies the publisher, repository, supported Tilecast versions, package registry, and immutable package digest. It can also include a longer plain-text description for the plugin's page, an icon, and screenshots with a short description of each. The package itself must follow the Tilecast extension package contract. See [Plugins](../plugins/) for the administrator experience and [Plugin development](../../developers/plugins/) for extension authoring.