Security and module discoverability

[DomBennett]

• How to make modules both discoverable but also ensure they're not malicious?
• Creating a "approved" list of modules may be difficulty to maintain and may lead to problems if a module is misidentified
• Is a simple warning system enough?

[DomBennett]

• All modules are installed with a health warning
• Modules are discoverable by a simple naming convention (om.., "outsider" label)
• Modules can be advertised through other means, there is no requirement for modules to be strictly light-weight and following the naming conventions. They can be whole R packages. They just won't be automatically discoverable.