Skip to main content
An advisory flags affected versions of a listing with a severity and a summary. Your server checks advisories for the plugins it has installed — at install time, on demand, and on a background poll you control.

Check on demand

Lists the advisories affecting your installed plugins, from the server’s cached advisory state.

At install time

Every install and update checks the registry before anything changes: a killed version cannot be resolved at all, and a non-withdrawn critical advisory against the requested version refuses the install. Lesser advisories ride the install response rather than blocking it.

The background poll

A running server polls the registry for advisories affecting its installed plugins. The poll is deliberately visible: At startup the server logs the poll target URL, so the outbound call is never silent. The poll fetches advisories only — nothing about your server is sent beyond the request itself. Disable it with one env var:
With the poll off, install-time checks and tai plugins advisories still work — they are direct requests you make, not background traffic.

See also