CAMP plugin repository
Browse and install verified Moodle plugins from CAMP repositories, with site policy controls and security advisory checks.
verified and archived by the registry · newer than the source platform's last reported tagDownload and compatibility
verification ledger
Source tagged by maintainer
github.com/camp-registry/moodle-tool_camp @ v0.5.1 · commit bec1269ac164
Rebuilt deterministically from that tag
canonical ZIP, byte-identical on every rebuild
Artifact hash recorded in the public index
sha256 5f2d337e6aef0f567271f250749aeefb6610843bf004940d39e6afc4d83f91c6
Release signed · trusted publishing
planned — TUF signing (RFC §4.3)
Recorded in public transparency log
planned — Sigstore/Rekor (RFC §4.3)
composer require davidpesce/moodle-tool_camp
About
tool_camp is the CAMP client for Moodle: an admin tool that lets site administrators browse one or more CAMP-format plugin repositories and install plugins through Moodle's own deployment machinery. Every download is verified against the SHA-256 the repository published before any file is written. No core changes are required.
- Reads each repository's Composer metadata (packages.json); trust tier, disclosure labels, supported Moodle branches and release maturity ride along in the camp block.
- Multiple repositories in priority order, with a per-repository access token for commercial repositories and source binding so a component is only ever updated from the repository it was installed from.
- Site policy enforced client-side: minimum trust tier (tier 2 source-verified is the floor), minimum release maturity (stable by default; release candidates, betas and alphas on opt-in), and a release cooldown.
- A scheduled task checks published security advisories against installed plugins and emails administrators about affected ones.
Requires Moodle 4.5 or later. Alpha.