What is live and what is not

  • Not live: payments, identity checks (KYC) and reviews.
  • You can also apply to submit packs from your account: Apply to submit a pack. You sign in with IntelliNix, and a person reads the application.
  • Packs are free to install at launch. Nobody is paid for a pack, and nothing here promises income.
  • Every submission is reviewed by a person. The reviewer is [PLACEHOLDER: name or role of the person who reviews submissions].
  • Nothing is listed until that review is done. How long it takes is not promised.

How to submit

Nixtra keeps its catalog in a git repository. A pack is one file, catalog/packs/<slug>/pack.json. You send it as a pull request. You need no Nixtra account. A pull request does need a free GitHub account. If you have none, see the email option below.

  1. Fork the repository. The public repository address is not set yet: [PLACEHOLDER: the public repository address, set in src/lib/brand.ts].
  2. Create the pack folder. In your fork, run:
    npm install
    npm run catalog:new -- my-pack-slug "My pack name"
    This writes catalog/packs/my-pack-slug/pack.json with one example gene and a correct digest. The slug uses a to z, 0 to 9 and hyphens, 3 to 64 characters.
  3. Make it yours. Replace the example gene, the name, summary and description. The scaffold is written for a Nixtra starter pack, so change these fields to describe a community pack:
    "kind": "community",
    "publisher": { "name": "Your name or business", "kind": "community", "verified": false },
    "license": "MSL-1",
    "scorecard": null,
    Do not claim to be verified. No verification is live. Each field and each gene is explained in the seller guide (docs/SELLER_GUIDE.md in the repository).
  4. Run the checker. It validates the file and runs the same scan rules that CI runs. It exits 1 on a problem and tells you the fix in plain English.
    npx nixtra-validate catalog/packs/my-pack-slug
    
    # after you edit gene text, refresh the digest:
    npx nixtra-validate --fix-digest catalog/packs/my-pack-slug
    To try a file first without installing anything, use the browser checker below.
  5. Open a pull request. Fill in the checklist in the pull request template: the checks pass, no personal data, a licence, you are allowed to publish it, no invented claims, and the notice for regulated work.
  6. A person reviews it. The reviewer reads the listing text and every gene against the content policy and the submission rules. The answer is: list it, change these things, or no, with a reason.

No GitHub account?

You can email your pack.json to hello@nixtra.tech Placeholder address . A person can open the pull request for you. This is slower, and the address is [PLACEHOLDER: a real, monitored contact mailbox]: until it is confirmed, mail may not be read. Run the checker first and fix what it reports.

Check a pack in your browser

Paste or drop a pack.json to see the findings that CI would report. The file never leaves your browser: there is no upload and no server to send it to. This page runs the pack format check, the genome check with its digest, and six of the eight scan rules. The claims and links rules need Node, so they run only in npx nixtra-validate and in CI. A pass here is not a pass there.

Your file stays in this browser. It is read here, checked here and never uploaded. There is no server to send it to.

Files over 512 KB are refused before they are read.

What the scanner blocks

Eight rules run on every pack. A block stops the pack from being listed. A warning goes to the reviewer. The rules are patterns, not a model, and they do not replace the person who reads the pack.

Build-time scan rules
Rule If it finds something What it looks for
secrets Blocks listing Cloud and API key shapes, private key blocks, token-like strings, and database addresses that contain a password.
pii Blocks listing Email addresses, phone-like numbers, Aadhaar-like and PAN-like numbers, card-like numbers, and execution or user ids.
injection Blocks listing Phrases that try to override an agent or send a conversation out, hidden characters, and markup or script tags.
claims Blocks listing Marketing claims the site cannot back: guaranteed, proven, certified, a compliance badge, invented ratings, download counts, customers or reviews, percentage gains, and comparisons or benchmarks that were not measured.
regulated Blocks listing A health, legal, finance or HR pack that is not marked regulated, or a regulated pack that does not say a qualified person must review it.
identity Blocks listing A starter genome that lacks its four identity genes or has a boundaries gene under 40 characters. Impersonation is refused: a false verified flag, “official” on a pack the operator did not publish, a publisher name that borrows this site, its platform or a public body, and genes that tell an agent to pass as a human or a regulator.
links Warning for the reviewer Any link that is not https, cannot be parsed, or is not on the allow list (which holds only this site). It does not check that a link is live.
size Warning for the reviewer Gene text close to the 400-character limit, or more than 14 genes.

Before you send

  • Read the submission rules and the content policy.
  • Pick a licence and read licences. The proposed default is MSL-1 [DECISION: licences a submitter may choose; the proposed default is MSL-1]. The owner has not confirmed it.
  • Send only what you wrote or have the right to share. No personal data, no secrets, no copied work.
  • If the pack touches health, legal, finance or HR work, set regulated to true and say in the description that a qualified person must review it before use.
  • Do not add ratings, download counts, customers or a quality figure you did not measure.
  • You can ask for your pack to be removed at any time. Reports from others follow the takedown process.

Open placeholders on this page

  • [PLACEHOLDER: name or role of the person who reviews submissions]
  • [PLACEHOLDER: a real, monitored contact mailbox]
  • [DECISION: licences a submitter may choose; the proposed default is MSL-1]
  • [PLACEHOLDER: the public repository address, set in src/lib/brand.ts]