← Back to homePlugin Publisher Agreement

Plugin Publisher Agreement

Effective Date: May 1, 2026 Last Updated: May 1, 2026

This Plugin Publisher Agreement ("PPA") is a binding legal agreement between you ("you," "Publisher") and GoodGist, Inc., a Delaware corporation with its principal place of business at 1825 S. Grant St., Suite 200, San Mateo, CA 94404, USA, doing business as Avery.Software ("Avery.Software," "we," "us," or "our").

This PPA supplements and is incorporated by reference into the Avery.Software Terms of Use (the "Terms") and the Avery.Software Privacy Policy. In case of conflict between this PPA and the Terms with respect to your conduct as a Publisher, this PPA controls; in all other respects the Terms control. Capitalized terms not defined here have the meaning given in the Terms.

By submitting a Plugin to the Avery.Software Forge marketplace, or by otherwise distributing a Plugin for installation into the Software, you accept this PPA and represent that you have authority to bind any organization on whose behalf you publish. If you do not accept this PPA, do not submit or distribute Plugins.

1. Definitions

"Plugin" means a versioned, signed software package (including without limitation generators, agent templates, messaging providers, connectors, app bases, and other extensions) that you author and submit for inclusion in the Forge catalog or for direct installation into the Software.
"Forge" means the Avery.Software-operated plugin distribution platform that hosts catalog metadata, signed tarballs, and verification material.
"Catalog Listing" means the metadata, description, icons, screenshots, version history, and other public-facing content describing your Plugin in the Forge catalog.
"End User" means any person or organization that installs or runs a Plugin within the Software.
"Publisher Account" means the Avery.Software account under which you submit Plugins, sign Plugin tarballs, and manage Catalog Listings.
"Publisher Signing Key" means the Ed25519 keypair (or other cryptographic material we designate) that you use to sign Plugin tarballs and that the Software uses to verify publisher identity.
"Manifest" means the schema-validated JSON manifest that accompanies each Plugin and declares its capability permissions, dependencies, version, license, and entry points.

2. Eligibility and Publisher Account

2.1 Eligibility. You may publish Plugins only if you (a) are at least 18 years old or otherwise the age of majority in your jurisdiction, (b) are not located in, under the control of, or a national or resident of any country subject to U.S. trade embargo or sanctions, (c) are not on any U.S. government list of restricted persons, and (d) maintain a verified Avery.Software account in good standing.

2.2 Publisher Account. You will provide accurate and complete information when establishing your Publisher Account and will keep that information current. You are responsible for all activity under your Publisher Account and your Publisher Signing Key, including activity by anyone you authorize to use either.

2.3 Signing Key Custody. You will (a) generate or accept your Publisher Signing Key per our published procedures; (b) store the private portion securely and not disclose it to any unauthorized party; (c) immediately notify legal@avery.software of any actual or suspected compromise; and (d) use the key only to sign Plugins you have authority to publish.

2.4 Organization Publishers. If you publish on behalf of an organization, you represent that you have authority to bind that organization to this PPA, and "you" includes both the authoring individual and the organization.

3. License Grant from Publisher to Avery.Software

3.1 Grant. Subject to this PPA, you grant Avery.Software a worldwide, non-exclusive, royalty-free, sublicensable, transferable license, for the duration of this PPA and thereafter to the extent necessary for End Users who already installed the Plugin, to:

(a) host, store, copy, transmit, distribute, and display the Plugin and its Catalog Listing through Forge and any successor distribution mechanism;
(b) verify the Plugin's signature, scan it for malware or policy violations, and execute integrity checks;
(c) make available to End Users (free of charge to Avery.Software) the Plugin and its Catalog Listing for installation into the Software;
(d) display the Catalog Listing in the Software's Library surfaces, in marketing materials, in documentation, and on Avery.Software-operated websites;
(e) sublicense the rights in (a)–(d) to End Users to the extent necessary for them to install, run, and update the Plugin within the Software.

3.2 No Modification Without Consent. Avery.Software will not modify the bytes of your signed Plugin tarball without your consent, except for non-substantive container or wrapper operations necessary for distribution. Catalog Listing content that you supply may be edited by Avery.Software for length, formatting, or compliance with our content policy.

3.3 End-User Sublicense. Each End User who installs your Plugin receives a non-exclusive, non-transferable, perpetual (so long as the Plugin is installed) license to run the Plugin within the Software for the End User's internal purposes, subject to the additional terms (if any) you have included in the Plugin's documentation or LICENSE file. You are responsible for ensuring that any LICENSE you bundle with the Plugin is legally compatible with the rights this PPA grants to Avery.Software and to End Users.

3.4 Reservation. Except for the licenses expressly granted above, you retain all right, title, and interest in your Plugin, including all intellectual property rights.

4. Publisher Representations and Warranties

You represent and warrant on a continuing basis that:

4.1 Authority and Ownership. You own or have the necessary rights, licenses, and permissions to grant the licenses in §3 and to publish the Plugin, including without limitation rights in any third-party code, dependencies, fonts, images, audio, trademarks, or other materials embedded in the Plugin or in the Catalog Listing.

4.2 No Infringement. The Plugin and Catalog Listing do not infringe, misappropriate, or violate any third party's intellectual property right, right of publicity, right of privacy, contractual right, or other legal right.

4.3 No Malicious Code. The Plugin does not contain, and will not introduce into an End User's environment, any virus, worm, trojan, ransomware, keylogger, backdoor, supply-chain exploit, cryptominer, browser hijacker, time-bomb, kill-switch, or other malicious or unwanted code or behavior.

4.4 No Unauthorized Data Collection or Exfiltration. The Plugin does not collect, transmit, or otherwise process End User data except as (a) necessary for the Plugin's documented function, (b) clearly disclosed in the Plugin's documentation and Catalog Listing, and (c) consented to (where consent is required by law). The Plugin does not exfiltrate prompts, generated source, project files, BYOK keys, OAuth tokens, license tokens, deploy tokens, or other End User secrets to any endpoint Avery.Software has not authorized.

4.5 Capability Permissions Honest. The capability permissions declared in the Manifest accurately and completely describe the Plugin's runtime needs. You will not request broader permissions than the Plugin actually requires, and you will not perform actions that would require permissions you did not declare.

4.6 Compliance with Law. The Plugin and your activities as Publisher comply with all applicable laws and regulations, including without limitation export-control laws, sanctions regimes, intellectual property laws, consumer-protection laws, data-protection laws (including the GDPR, CCPA / CPRA, and other U.S. state privacy laws to the extent applicable to End Users), child-safety laws, and laws governing AI-generated content where applicable.

4.7 Open-Source Compliance. If the Plugin incorporates open-source software, you have complied with all applicable open-source license terms, including attribution, source-code disclosure, copyleft, and notice obligations. You will include applicable license texts in the Plugin tarball or in a clearly referenced location.

4.8 Disclosure of Third-Party Calls. The Plugin's documentation and Catalog Listing accurately disclose every third-party network endpoint, service, model, or API that the Plugin contacts at install time, configuration time, or runtime, including the purpose and the data sent.

4.9 No Sanctioned Provenance. No portion of the Plugin originates from a person or entity subject to U.S. trade embargo or sanctions.

4.10 No Defamatory or Unlawful Content. The Plugin and Catalog Listing do not contain content that is defamatory, threatening, harassing, deceptive, sexually explicit involving minors, that incites violence or self-harm, that promotes weapons capable of mass casualties, or that is otherwise unlawful under applicable law.

4.11 No Circumvention. The Plugin does not bypass, circumvent, or undermine licensing, authentication, signature-verification, rate-limiting, capability-permission, or sandboxing mechanisms in the Software, in the operating system, or in any third-party service the End User accesses through the Plugin.

4.12 No Misrepresentation. The Plugin does not impersonate Avery.Software, GoodGist, Inc., or any third party, and does not falsely imply affiliation, endorsement, or sponsorship.

5. Plugin Requirements

5.1 Manifest. Each Plugin must include a Manifest that validates against the published Manifest schema (see packages/contracts documentation), declares all required capability permissions, names a stable identifier, and includes a SemVer version.

5.2 Signature. Each released Plugin tarball must be signed with your Publisher Signing Key. Avery.Software will refuse to distribute or install Plugin bytes that fail signature verification.

5.3 No Network at Install. Plugins should not require network access during installation except as necessary for documented post-install configuration with the End User's explicit consent.

5.4 Resource Footprint. Plugins should be reasonably proportioned. Avery.Software may publish size limits and reject submissions that exceed them.

5.5 Reproducible Builds (Where Feasible). You will, where the Plugin's toolchain supports it, follow reproducible-build guidelines so that an independent party can reconstruct the signed bytes from the published source.

5.6 Versioning and Upgrades. New versions of a Plugin will be published under the same Plugin identifier and a strictly increasing SemVer. Breaking changes (incompatible Manifests, permission expansions, removed capabilities) require a major version bump and a clear migration note in the Catalog Listing.

5.7 End-of-Life Communications. If you intend to deprecate or unpublish a Plugin, you will provide reasonable advance notice in the Catalog Listing and, where feasible, a migration path for End Users.

6. Avery.Software's Rights

6.1 Discretionary Acceptance. Avery.Software may, in its sole discretion, accept, reject, or delay publication of any Plugin or version, with or without explanation. We have no obligation to publish, maintain availability of, market, or promote any Plugin.

6.2 Removal. Avery.Software may remove a Plugin (in whole or in version-specific part) from Forge at any time, with or without notice, for any reason, including without limitation: (a) breach of this PPA; (b) reported or detected security or malware concerns; (c) policy violations; (d) DMCA or other takedown notices; (e) court orders or regulatory action; (f) incompatibility with new versions of the Software; or (g) business or strategic reasons. Removal does not entitle you to any refund, credit, or compensation.

6.3 Signing Key Revocation. Avery.Software may revoke your Publisher Signing Key at any time for the reasons in §6.2. Once revoked, the Software will refuse to install or update any Plugin signed with that key. We will notify you of revocation through the contact information associated with your Publisher Account.

6.4 Security Scans. Avery.Software may scan your Plugin bytes for malware, secrets, vulnerable dependencies, license issues, and policy violations. We may share scan results with you, with appropriate authorities (when legally required), and with the security research community in aggregated or redacted form.

6.5 Branding and Display. Avery.Software may display your Plugin's Catalog Listing alongside other Plugins, in any order, with or without ranking signals. We may apply consistent formatting, truncation, or adjacent labels.

6.6 No Service Levels. Avery.Software does not commit to any service level for Forge, including without limitation uptime, freshness of catalog data, or installation latency. If the catalog or any specific Plugin is unavailable, you are not entitled to any remedy beyond the right to discontinue publication.

7. End-User Privacy and Documentation

7.1 Plugin-Specific Privacy. If your Plugin processes End User personal data (in any way that does not stay entirely local on the End User's machine), you are the controller (or business, under the CCPA) for that processing and must comply with all applicable data-protection laws. Avery.Software is not your processor or sub-processor.

7.2 Plugin Documentation. You will provide accurate user-facing documentation describing what the Plugin does, what data it touches, what permissions it requires, and what third-party services it uses. The Catalog Listing must link to or otherwise surface this documentation.

7.3 Support. You are responsible for End User support relating to your Plugin. Avery.Software has no obligation to field, escalate, or resolve End User reports concerning your Plugin.

8. No Compensation

As of the Effective Date, Avery.Software does not pay Publishers for Plugins distributed through Forge, nor does Avery.Software charge End Users for installation of any Plugin through any mechanism that produces revenue for the Publisher or Avery.Software. Forge is a free distribution channel for Plugins. Avery.Software may, in the future, introduce revenue-share, paid-Plugin, or sponsorship programs; any such program will be governed by separate terms that you must accept before participating.

9. Intellectual Property

9.1 Avery.Software Marks. "Avery.Software," "Avery NXR," "Forge," the lime spark logo, and related marks are trademarks of GoodGist, Inc. You may use these marks only as expressly permitted in our then-current trademark guidelines, and only to identify, link to, or describe interoperability with the Avery.Software product.

9.2 Publisher Marks. Subject to §3.1(d), you grant Avery.Software a non-exclusive, royalty-free license to use your Plugin name, icon, and any associated marks for the limited purpose of displaying the Catalog Listing and identifying the Plugin in the Software, marketing materials, and documentation.

9.3 Third-Party Marks. You may reference third-party trademarks only in a manner consistent with applicable law and the trademark owner's policies. You are solely responsible for any third-party mark you reference.

10. Indemnification

You will defend, indemnify, and hold harmless Avery.Software, GoodGist, Inc., and their officers, directors, employees, agents, licensors, and suppliers from and against any and all claims, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to: (a) your Plugin, including without limitation any defect, vulnerability, malicious behavior, license violation, or intellectual property infringement; (b) your Catalog Listing; (c) your breach of this PPA; (d) your violation of any third-party right (including intellectual property, privacy, or publicity rights); (e) any data your Plugin processes; (f) any content you submit to Forge; or (g) End-User claims arising from use of your Plugin. We reserve the right, at our own expense, to assume the exclusive defense and control of any matter otherwise subject to indemnification by you, in which case you agree to cooperate with our defense.

11. Disclaimers and Limitation of Liability

11.1 As-Is Distribution. AVERY.SOFTWARE DISTRIBUTES PLUGINS ON AN "AS IS" BASIS, WITHOUT WARRANTY OF ANY KIND. You acknowledge and agree that Avery.Software has no obligation to verify the quality, safety, security, fitness for purpose, or non-infringement of any Plugin (including yours), and that the signature-verification mechanism only confirms the bytes an End User receives match what you signed; it does not endorse or certify the Plugin.

11.2 No Liability for End-User Issues. AVERY.SOFTWARE IS NOT LIABLE TO YOU FOR ANY LOSS, DAMAGE, OR LIABILITY YOU INCUR ARISING FROM AN END USER'S USE OF YOUR PLUGIN. End-User disputes about your Plugin are between you and the End User.

11.3 Aggregate Cap. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, AVERY.SOFTWARE'S TOTAL CUMULATIVE LIABILITY TO YOU ARISING OUT OF OR RELATING TO THIS PPA AND/OR FORGE WILL NOT EXCEED ONE HUNDRED U.S. DOLLARS (US$100). Because Forge is provided to you free of charge, this is a meaningful limitation. The carve-outs in §19.5 of the Terms apply analogously.

11.4 No Indirect Damages. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, AVERY.SOFTWARE WILL NOT BE LIABLE TO YOU FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, GOODWILL, USE, OR DATA, EVEN IF AVERY.SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

12. Term and Termination

12.1 Term. This PPA takes effect when you first submit a Plugin or otherwise distribute a Plugin for installation into the Software, and continues until terminated.

12.2 Termination by You. You may terminate this PPA at any time by (a) un-publishing all of your Plugins from Forge, (b) revoking your Publisher Signing Key, and (c) sending written notice to legal@avery.software.

12.3 Termination by Avery.Software. Avery.Software may terminate this PPA at any time, with or without notice, for any reason, including without limitation breach by you, regulatory action, security concerns, or business reasons.

12.4 Effect on Existing Installs. Termination of this PPA does not, on its own, uninstall the Plugin from End Users' devices. Already-installed Plugin bytes will continue to function on End Users' devices unless and until the End User uninstalls them or the Software (in a future version) refuses to load Plugins associated with terminated Publishers. Avery.Software may, at its discretion and without liability to you, instruct the Software to refuse to load or update Plugins associated with terminated Publishers, including via key revocation under §6.3.

12.5 Survival. Sections 3 (License Grant — to the extent necessary for End Users with prior installs), 4 (Reps and Warranties — for breaches that occurred prior to termination), 6.2–6.4 (Removal, Revocation, Security Scans), 8 (No Compensation), 9 (IP), 10 (Indemnification), 11 (Disclaimers and Liability), 12.4 (Effect on Existing Installs), 13 (Dispute Resolution), and 14 (Miscellaneous) survive termination.

13. Dispute Resolution; Arbitration; Class Action Waiver

13.1 Informal Resolution First. Before initiating any formal dispute, you will email legal@avery.software a written description of the dispute and the relief sought. The parties will attempt in good faith to resolve the dispute informally for at least sixty (60) days.

13.2 Binding Arbitration. Any dispute arising out of or relating to this PPA or to Forge that is not resolved informally will be resolved by final and binding arbitration administered by JAMS in accordance with its Streamlined Arbitration Rules, before a single arbitrator. The seat of arbitration is San Mateo County, California, USA.

13.3 Class Action Waiver. You and Avery.Software each agree to bring claims only in your or its individual capacity, and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding.

13.4 Equitable Relief. Notwithstanding §13.2, either party may bring a lawsuit in the federal or state courts located in San Mateo County, California solely for injunctive or other equitable relief to prevent unauthorized use of intellectual property or breach of confidentiality.

13.5 30-Day Opt-Out. You may opt out of §§13.2 and 13.3 by sending a written notice to legal@avery.software within thirty (30) days of first accepting this PPA.

14. Miscellaneous

14.1 Governing Law. This PPA is governed by the laws of the State of California, USA, without regard to conflict-of-laws principles.

14.2 Entire Agreement. This PPA, together with the Terms and the Privacy Policy, is the entire agreement between you and Avery.Software regarding Plugin publishing and supersedes all prior or contemporaneous communications.

14.3 Modifications. Avery.Software may modify this PPA at any time. For material changes we will provide reasonable advance notice through your Publisher Account or by email to the address associated with your Publisher Account. Your continued submission, distribution, or maintenance of Plugins after the effective date of a change constitutes acceptance.

14.4 Severability. If any provision is held invalid or unenforceable, the remainder remains in effect, and the invalid provision will be reformed to the minimum extent necessary to make it valid and enforceable.

14.5 No Waiver. No failure or delay by Avery.Software to exercise any right is a waiver.

14.6 Assignment. You may not assign this PPA without our prior written consent. We may assign this PPA without restriction.

14.7 No Third-Party Beneficiaries. Except for End Users with respect to the §3.3 sublicense, there are no third-party beneficiaries to this PPA.

14.8 Force Majeure. Avery.Software is not liable for any failure or delay in performance arising from causes beyond its reasonable control.

14.9 Notices. Notices to Avery.Software must be sent to legal@avery.software and to the address below. Notices to you will be sent to the contact associated with your Publisher Account.

14.10 Independent Contractors. The parties are independent contractors. This PPA does not create a partnership, joint venture, agency, employment, or fiduciary relationship.

15. Contact

GoodGist, Inc. (doing business as Avery.Software) 1825 S. Grant St., Suite 200 San Mateo, CA 94404, USA

Email: legal@avery.software

Trademark and Copyright Notice

Avery.Software®, Avery NXR®, Forge, the lime spark logo, and related trade dress are trademarks of GoodGist, Inc. All other product names, brand names, logos, and trademarks referenced in this PPA are the property of their respective owners and are used for identification purposes only.

By submitting a Plugin to Forge or otherwise distributing a Plugin for installation into the Software, you acknowledge that you have read, understood, and agree to this Plugin Publisher Agreement.