GitCode Marketplace Terms of Service
Current Version: 1.0
Effective Date: November 3, 2026
Thank you for using the GitCode (hereinafter referred to as the "Platform") Marketplace service.
The Platform Marketplace (hereinafter referred to as the "Marketplace") is a service provided by this Platform for users to search, display, and distribute applications and plugins. Through the Marketplace, you may browse and search for relevant Apps and Actions plugins, including official plugins released by this Platform and plugins published and listed by third-party developers (hereinafter referred to as "Publishers", collectively referred to as "Plugins"), which can be referenced, installed, and executed in your own projects or workflows.
Important Notice:
We specifically advise you that before using the Marketplace service, please read the "GitCode Marketplace Terms of Service" (hereinafter referred to as these "Terms") completely and carefully in advance, and fully understand all provisions herein, especially those concerning limitation or exemption of liability, sources of rights for plugins, usage risks, and due diligence obligations. Provisions limiting or exempting liability may be highlighted in bold or other conspicuous formats to draw your attention. Your first entry into the Marketplace and acceptance of these Terms by checking the agreement box, or expressing consent through any other method we recognize, shall be deemed as your voluntary commitment to be bound by all provisions herein. These Terms shall become established and effective from that point. If you do not accept the contents of these Terms, please refrain from using the Marketplace service.
Due to the need for service development and functionality updates, as well as compliance with applicable laws and regulations, we may revise these Terms from time to time. Upon any revision, we will notify you via pop-ups, announcements, or other means. If you do not agree to the revised terms, please immediately cease using the Marketplace service. Your continued access to or use of the Marketplace, or your continued reference to plugins obtained through the Marketplace in your projects, shall be deemed as your acceptance of the revised Terms.
You warrant that you possess the civil capacity appropriate for your actions as prescribed by the laws of the People's Republic of China at the time of using this Platform. If you are a person with limited or no civil capacity, please read these Terms under the guidance of your statutory guardian and decide whether to accept their contents. If you accept these Terms on behalf of an institution rather than yourself, you shall be deemed to have full authority to consent to these Terms on behalf of such institution.
We specifically draw your attention to the following: Except for Apps and Actions plugins developed and published by this Platform itself, all plugins in the Marketplace are developed and published by third-party publishers. The checks we perform on plugins are automated formal validations executed by the system according to predefined rules, and do not involve any manual substantive review. A plugin being "passed inspection" or "listed" only indicates that its formal requirements were met at the time of inspection; it does not constitute our approval, certification, recommendation, endorsement, or guarantee of any kind regarding the plugin, nor does it imply our recognition that the plugin is suitable for any specific purpose of yours.
These Terms constitute special agreements to the "GitCode Service Terms". For matters concerning the search, display, distribution, acquisition, and use of the Marketplace, if there is any inconsistency between these Terms and the "GitCode Service Terms", these Terms shall prevail. For matters not covered by these Terms, the "GitCode Service Terms" and other behavioral codes and policies published on this Platform shall apply.
I. Definitions
- Marketplace: Refers to the functional module within this Platform used to publicly display, search, and distribute applications and plugins, including its web pages, APIs, and associated distribution mechanisms.
- Apps: Refers to the applications provided in the Apps module of the Marketplace.
- Plugins: Refers to a reusable automation unit developed by a Publisher and stored in their public code repository, which can be called and invoked by others in their workflows through referencing.
- Publishers: Refers to users of this Platform who publish plugins to the Marketplace and are the developers or rights holders of said plugins.
- Users and You: Refers to users of this Platform who obtain plugins through the Marketplace and reference, install, and execute them in their own projects or workflows.
- EULA: Refers to the End-User License Agreement provided by the Publisher to Users regarding their plugin, including any open-source license applied and applicable to such plugin, or other equivalent licensing terms.
- Version Tags and Release Versions: Serve as location anchors for versions. Version tags may be moved, deleted, or retargeted to other commits, whereas specific commit records are immutable.
- Runners: Refers to the computing environment that actually executes plugin code, including the official runners provided and managed by us, as well as self-hosted runners deployed and managed by you.
- Official Plugins and Official Badges: Official plugins refer to plugins developed by this Platform itself and published to the Marketplace's Actions module under the Platform's name; Official badges refer to the wording "Official Certified", badges, or other identifiers we attach to plugins indicating that they are provided by or certified by this Platform.
II. Service Content and Nature
- We provide you with services through the Marketplace, including plugin display, search, categorization, sorting, presentation of plugin metadata, usage documentation, and EULA access paths, as well as acquiring plugin code and executing it on runners upon your explicit instructions.
- Except for Apps and official plugins, we are not the developer, provider, seller, or rights holder of the plugins, nor are we a party to the licensing relationship between you and the Publisher. The service we provide you through the Marketplace is display and distribution; the rights, quality, functionality, security, and availability of plugins are the responsibility of the Publisher to you pursuant to their EULA.
- We reserve the right to independently determine the category structure, sorting rules, display styles, and recommendation mechanisms of the Marketplace. Display locations, sorting results, or whether a plugin is recommended do not constitute our recommendation, endorsement, or quality guarantee for any plugin.
- The rights you acquire regarding Apps and official plugins, as well as the responsibilities we bear for them, shall be determined according to the "GitCode Service Terms", the attached licensing terms for such content, and the explanations published by us from time to time.
III. Obtaining, Referencing, and Executing Plugins
- You may reference plugins via version tags, release versions, or specific commit IDs. You understand that version tags may be moved, deleted, or retargeted by the Publisher to other commits, while only specific commit records are immutable. If you reference only the major version number, the code currently pointed to by that tag will be automatically fetched the next time you run it. We recommend locking to a specific commit ID.
- Where a plugin requires authorization (including but not limited to tokens, repository read/write permissions, data access scopes) to run, the Publisher must list each requested permission and its purpose in its usage documentation. You should review such declarations before execution and grant only the minimum permissions necessary to match the declared functions of the plugin; your granting of permissions shall be deemed as your authorization for the plugin to access corresponding data and resources within that scope.
- Plugin code is executed on the runner you specify: If you choose an official runner, the plugin code will run in the computing environment managed by us; if you choose a self-hosted runner, the plugin code will run in an environment owned or managed by you, and we shall have no access to or involvement in the data processing in such environment. Permissions usage, data access, and external network connections during execution depend on the plugin's own implementation; you shall assess and bear the resulting risks yourself.
- When you inject secrets, tokens, and environment variables into a plugin via workflow configuration, it shall be deemed that you have decided to disclose such credentials to the plugin yourself. You should only inject credentials within the minimum scope matching the plugin's declared functions. We take necessary measures to protect official runners, but these measures do not guarantee the identification and blocking of all improper behaviors by plugins; we assume no responsibility for the plugin's use, retention, or transmission of your credentials.
- We have the right to enforce resource quotas, network access controls, and throttling for abnormal calls on plugins running on official runners, and may interrupt their execution when they endanger the safety or stability of the runtime environment.
- When we or the Publishers publish updated versions to the Marketplace, such updates may be automatically obtained and executed based on your previous reference configurations without further notice to you. We do not make any guarantees regarding the timing, scope of coverage, or your actual acquisition of updates. To prevent automatic acquisition of updates, you should lock to a specific commit ID.
IV. Plugin Inspection
- The inspections we perform on plugins are automated formal validations executed by the system according to predefined rules. Their purpose is to verify whether objective formal requirements are met; we conduct no manual reading, testing, evaluation, or substantive review of plugin code logic, quality, functionality, performance, security, existence of vulnerabilities or malicious behavior, or infringement of third-party rights.
- Statements such as a plugin having "passed inspection", been "listed", or having a "normal status" only indicate that its formal requirements were met at the time of inspection. They do not constitute our approval, certification, recommendation, endorsement, guarantee, or warranty regarding the plugin, nor do they imply our recognition that the plugin is suitable for any specific purpose of yours. Regulatory actions we take against plugins based on laws, regulations, supervisory requirements, or to protect user and public interests likewise do not constitute any evaluation or guarantee of the plugin's quality.
- Where we grant official badges or certifications to specific plugins according to separately published rules, matters such as application conditions, review standards, validity periods, re-examination, and revocation shall follow such rules.
V. Source of Rights and EULA
- Except for official plugins, the right to use and other rights you acquire for plugins originate from the Publishers, not this Platform. Their scope, duration, limitations, and liabilities are subject to the plugin's EULA. You should read the EULA prior to obtaining and executing the plugin. The right to use and other rights you acquire for Apps and official plugins are granted by us, and their scope, duration, limitations, and liabilities are governed by the "GitCode Service Terms" and the attached licensing terms for such plugins, along with the explanations and rules published by us from time to time.
- Unless otherwise explicitly stated in the EULA or the open-source license adopted by it, the right to use you acquire for a plugin is solely for your own use. It shall not be transferred, sublicensed, or resold to third parties; if you provide, resell, or redistribute the plugin to third parties, you must separately obtain the Publisher's authorization.
- We are not a party to the EULA and assume no responsibility for any rights or obligations thereunder. Disputes arising between you and the Publisher concerning plugins, EULAs, or usage data shall be resolved through direct negotiation between you and the Publisher. We may provide necessary assistance but have no obligation to participate or adjudicate.
- Where a Publisher designates this Platform as a third-party beneficiary in its EULA, we have the right to directly request performance from you of obligations related to the Platform's interests under the EULA. We may also, with the Publisher's authorization, issue notices, conduct communications, and assert rights against you for violations of the EULA in the Publisher's name. Such circumstances do not make us a party to the EULA.
- A Publisher leaving the Marketplace, ceasing maintenance, or converting a repository to private shall not affect your existing rights acquired under the EULA for plugins already installed, referenced, or obtained; subsequent support, bug fixes, and version updates for said plugins shall be the responsibility of the Publisher to you pursuant to their EULA and announcements.
VI. Your Obligations
You warrant that during your use of the Marketplace, you will comply with the relevant laws and regulations of the People's Republic of China, the usage guidelines listed on this Platform, and the principle of good faith. In addition to the behavioral guidelines set forth in the "GitCode Service Terms", you shall not engage in the following acts:
- Manipulating Marketplace sorting, ratings, or statistical data through fake transactions, false reviews, bulk installation, or other improper means;
- Reselling, agent-publishing, or secondary distributing plugins, code, or dependencies enjoyed by the Publisher without their authorization;
- Using data obtained during plugin execution for purposes beyond those declared by the plugin, or providing it to third parties without consent;
- Utilizing plugins to engage in activities that violate laws and regulations, infringe upon the lawful rights of others, jeopardize network security, or disrupt the normal use of this Platform and other users' services. Should you violate this section or relevant laws and regulations, we have the right to restrict or prohibit your future use of the Marketplace; if you cause losses to us or third parties, you shall bear corresponding compensation liability in accordance with the law.
VII. Fees and Settlement
- Currently, all plugins displayed in the Marketplace are provided free of charge, and we do not charge fees for the plugins themselves.
- If paid plugin distribution is launched in the future, the settlement rules published at that time and the agreements between you and the Publisher shall prevail.
VIII. Usage Risks and Your Due Diligence
Please fully read the usage documentation, permission declarations, and EULAs of Apps and plugins before adoption, and evaluate the risks yourself.
- We make no warranties or guarantees regarding plugins, nor assume responsibility for the functionality, performance, stability, security, suitability, completeness, absence of viruses or malicious code, or whether plugins meet any of your specific needs. We are not liable for behaviors of obtaining and using plugins through channels outside the Marketplace.
- You shall independently take the following due diligence measures: ① Review the plugin's usage documentation, permission declarations, required credential list, and EULA; ② Evaluate the plugin's compatibility with your project environment, versions, and compliance requirements; ③ Verify in an isolated or test environment before applying to production environments; ④ Backup important data and configurations; ⑤ Securely safeguard your tokens, keys, and environment variables; ⑥ Monitor plugin version updates, risk warnings, and Publisher announcements.
- We shall not be liable for losses incurred by you due to the following circumstances: ① Failure to perform the aforementioned due diligence measures before adopting a plugin; ② Your decisions to grant permissions to or provide credentials to plugins and their consequences; ③ Functional defects, security vulnerabilities, malicious code, data backtracking, credential leakage, or erroneous outputs of plugins; ④ Disputes or losses caused by third-party services, open-source components, network resources, or model capabilities relied upon or invoked by plugins; ⑤ Availability impairments, business interruptions, or alternative development costs caused by Publishers changing repository visibility, deleting repositories, deleting or moving version tags, ceasing maintenance, or revoking publications; ⑥ Disputes arising between you and the Publisher, or between you and any third party, concerning plugins, EULAs, or usage data.
- Version tags may be moved or retargeted by the Publisher. The actual content of the same version number may change, and we make no guarantees regarding the consistency of its content.
IX. Stopping Distribution, Delisting, and Availability
- We do not guarantee that any plugin will remain available continuously. In any of the following circumstances, we may stop distribution, delist, or remove a plugin without prior notice: ① Requirements by laws, regulations, supervisory authorities, or effective documents from judicial or administrative organs; ② Infringement notifications or other rights claims raised by third-party rights holders regarding the plugin; ③ Existence or potential existence of security risks, malicious behavior, vulnerability exploitation, credential leakage, etc.; ④ Violation by the Publisher of its agreements with this Platform or the rules published on this Platform; ⑤ Other circumstances necessary to protect the interests of this Platform, users, or society.
- Measures taken under the preceding paragraph shall take effect from the moment of decision. Where permitted by the circumstances, we shall notify you via platform messages or the email address you registered. Involving security risks or credential leakage, loss-prevention measures such as token revocation and version interception may be implemented simultaneously.
- Versions already installed, referenced, or obtained by you shall not be retroactively reclaimed due to the stopping of distribution of that plugin; you may continue to use said versions according to their EULAs. However, such versions may subsequently become unavailable for updates, support, or fixes. For any availability impairments, business interruptions, or alternative development costs you incur, you may claim against the Publisher according to their EULA; we assume no responsibility for such losses.
- We may modify, suspend, or terminate the Marketplace (or any part thereof) at any time. Unless otherwise required by laws or in emergency situations, we will notify you in advance via announcements for a reasonable period.
X. Security Incidents and Complaints/Reporting
- If you discover or become aware that a plugin has security vulnerabilities, contains implanted malicious code, poses a credential leakage risk, or outputs illegal content, you should promptly report it to us through channels we publish. Upon verification, if we deem a security risk exists, we may take measures including stopping distribution, delisting, version interception, token revocation, and suspending the processing of personal information by the plugin, and notify you and the Publisher. In cases where your credentials, personal information, or data may leak, we shall make reasonable efforts to notify you promptly.
- If you believe a plugin infringes upon your lawful rights, contains illegal content, or violates the rules of this Platform, you may submit complaints or reports through our published channels. We may take necessary measures according to the rules published on this Platform and legal requirements.
- If malicious or erroneous complaints/reports by you cause losses to the Publisher or us, you shall bear liability in accordance with the law.
XI. Intellectual Property
- Intellectual property rights for Apps and official plugins shall be handled according to the "GitCode Service Terms"; copyrights, patent rights, trademark rights, and other lawful rights of other plugins belong to the Publishers or other entities legally entitled thereto. We do not acquire any ownership of plugins merely by providing Marketplace services.
- By obtaining plugins through the Marketplace, you only acquire the right to use expressly granted by their EULAs; you shall not delete, conceal, or alter rights declarations, license texts, or identifiers within the plugins.
XII. Data and Personal Information
- Information we collect regarding the Marketplace shall be handled according to the "GitCode Privacy Policy". If you choose an official runner, as the provider of the runtime environment, we handle data within that environment according to the "GitCode Privacy Policy"; if you choose a self-hosted runner, we do not participate in plugin execution or data processing. Granting permissions to a plugin constitutes your authorization for it to access corresponding data and resources within the authorized scope; you shall independently fulfill your obligations as a personal information processor.
- We do not participate in the Publisher's data processing activities and assume no responsibility for such processing; where personal information requires cross-border transmission due to plugin architecture, relevant obligations shall be borne respectively by you and the Publisher in accordance with the law.
- We may suspend a plugin's transmission, collection, or processing of personal information if required by laws/regulations or necessary to protect your and other users' rights; you shall immediately cease relevant usage and cooperate.
XIII. Limitation of Liability
- We shall not be liable for any loss of profits, use, reputation, or data, or any incidental, indirect, special, consequential, or punitive damages arising from your use or inability to use the Marketplace service, including damages caused by the following:
(1) Any modification, suspension, or termination of the Marketplace service;
(2) Adverse effects caused to you by adjustments to this Platform's APIs or technical specifications;
(3) Statements or actions of any third party regarding the service;
(4) Platform interruption or data loss caused by cyber security incidents, force majeure, or failures of underlying telecommunications or third-party cloud service providers;
(5) Unauthorized access to or alteration of your transmissions or data not caused by our intentional misconduct or gross negligence.
The circumstances listed in Article VIII, Paragraph 3 of these Terms are equally subject to this limitation of liability. Regardless of whether we have been advised of the possibility of such damages, even if remedies specified herein fail of their essential purpose, our liability shall be limited. 2. The aforementioned limitation of liability shall not apply to circumstances where you suffer losses due to our intentional misconduct or gross negligence, nor to circumstances causing personal injury.
XIV. Modification and Termination of the Agreement
- We have the right to modify these Terms based on changes in laws/regulations, business adjustments, or ecosystem governance needs, and will notify you via pop-ups, announcements, or other means. Where modifications to this Platform's APIs, runtime environments, or technical specifications require you to adapt your projects, we will provide a reasonable adaptation period.
- If you violate these Terms or associated rules of this Platform, we have the right to suspend or terminate the provision of Marketplace services to you; in severe circumstances, your account may be handled concurrently according to the "GitCode Service Terms". After termination of these Terms, Articles V, VIII, XI, and XIII shall remain in effect.
XV. Miscellaneous
1. Relationship of Parties
An agreement relationship concerning the Marketplace service is established between you and this Platform; an EULA or other licensing relationship concerning plugins is established between you and the Publisher. These Terms do not constitute a partnership, joint venture, affiliation, agency, trust, employment, or franchise relationship; neither party may make statements or assume responsibilities externally in the name of the other.
2. Governing Law
Unless otherwise prescribed by applicable law, these Terms and any access to or use of the Marketplace service shall be governed by the laws of the People's Republic of China, without regard to conflict of laws principles. You and this Platform both agree that for disputes arising from or related to these Terms, the parties should attempt to resolve them through friendly negotiation; if negotiation fails, either party has the right to submit the dispute to the People's Court of Yuzhong District, Chongqing Municipality, where the operating entity is located.
3. Matters Not Covered
Matters not covered by these Terms, including but not limited to secure management of accounts and credentials, use of this Platform's branding, severability and non-waiver, non-transferability of the agreement, and delivery of contact information and legal notices, shall be governed by the "GitCode Service Terms" and other behavioral codes and policies published on this Platform.