Terms of Use

By creating an account, publishing a package, or using the registry, these Terms apply.

Moderation and escalation

Open source moderation is intended to foster collaborative efforts that maintain healthy systems and ways of working for those building in the open. bpm moderators are held to the same due diligence standard expected across the registry.

1. Flagged packages are investigated.
2. If a violation is confirmed, the package is hidden and download is disabled.
3. The contributor is responsible for remedying the package.
4. Maintainers provide relevant findings to support remediation.
5. The package remains disabled until fixes are verified.
6. High-risk packages may be removed with follow-up reasoning and evidence.
7. Contributors may appeal moderation outcomes.

Package installation and user responsibility

1. Users who install packages from bpm registry assume risk associated with installation and execution outcomes.
2. Users are encouraged and expected to perform due diligence when vetting packages, including review of package metadata, source, dependencies, and behavior before use.
3. Packages that may violate governance documentation associated with usebpm.dev should be reported through bpm-registry-issues.

Issue reporting

Report concerns and policy issues through bpm-registry-issues.

This document works together with the Privacy Policy and Contributor Agreement.