<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[How can I make sure that a third-party module (MMM) is safe to use?]]></title><description><![CDATA[<p dir="auto">Hi everyone,</p>
<p dir="auto">I’m starting to explore third-party MagicMirror modules (MMMs), and I’ve found some really cool ones. However, before I install anything, I want to make sure I’m not putting my system or data at risk.</p>
<p dir="auto">What are your tips for checking whether a third-party module is safe and trustworthy?<br />
Are there any red flags I should look out for in the code or repository?<br />
Do you only use modules from specific sources?</p>
<p dir="auto">Thanks in advance 😊</p>
]]></description><link>https://forum.magicmirror.builders/topic/19594/how-can-i-make-sure-that-a-third-party-module-mmm-is-safe-to-use</link><generator>RSS for Node</generator><lastBuildDate>Wed, 10 Jun 2026 19:06:50 GMT</lastBuildDate><atom:link href="https://forum.magicmirror.builders/topic/19594.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 04 Apr 2025 17:35:10 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to How can I make sure that a third-party module (MMM) is safe to use? on Fri, 04 Apr 2025 22:39:57 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/bkeyport" aria-label="Profile: BKeyport">@<bdi>BKeyport</bdi></a> i know, didn’t want to go down that rat hole</p>
<p dir="auto">i proposed some module standards, (based on that experience) no minified code,  so that bad actors cant hide.</p>
<p dir="auto">there are currently only 7 modules w minified code, but they were all generated from typescript source. so minified in that case is unimportant.</p>
<p dir="auto">we dont have a way to enforce any such standards<br />
makes me think of some vault to keep things from disappearing too</p>
]]></description><link>https://forum.magicmirror.builders/post/125609</link><guid isPermaLink="true">https://forum.magicmirror.builders/post/125609</guid><dc:creator><![CDATA[sdetweil]]></dc:creator><pubDate>Fri, 04 Apr 2025 22:39:57 GMT</pubDate></item><item><title><![CDATA[Reply to How can I make sure that a third-party module (MMM) is safe to use? on Fri, 04 Apr 2025 22:27:07 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/sdetweil" aria-label="Profile: sdetweil">@<bdi>sdetweil</bdi></a> … depends on how to define bad actor. We’ve not had any developers that have used the platform in a bad way with their modules, yes…</p>
]]></description><link>https://forum.magicmirror.builders/post/125608</link><guid isPermaLink="true">https://forum.magicmirror.builders/post/125608</guid><dc:creator><![CDATA[BKeyport]]></dc:creator><pubDate>Fri, 04 Apr 2025 22:27:07 GMT</pubDate></item><item><title><![CDATA[Reply to How can I make sure that a third-party module (MMM) is safe to use? on Fri, 04 Apr 2025 20:48:12 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/tagtube" aria-label="Profile: TagTube">@<bdi>TagTube</bdi></a> there are no advisories . examining the code is the only way. no tests you can run</p>
<p dir="auto">so far because of opensource we have not had any bad actor developers</p>
]]></description><link>https://forum.magicmirror.builders/post/125606</link><guid isPermaLink="true">https://forum.magicmirror.builders/post/125606</guid><dc:creator><![CDATA[sdetweil]]></dc:creator><pubDate>Fri, 04 Apr 2025 20:48:12 GMT</pubDate></item></channel></rss>