Cloudflare’s EmDash 1.0 makes sandboxed plugins ask for access first
Cloudflare released EmDash 1.0, an open-source CMS that sandboxes plugins until administrators approve access.
Cloudflare released EmDash 1.0, a free open-source CMS that runs each plugin in its own isolated runtime. A plugin starts with only private storage and cannot reach site content, media, users, secrets, the filesystem, or the network until it declares what it needs and an administrator approves it. The plugin registry runs on Bluesky's AT Protocol: publishers sign packages, and EmDash checks the signed commit, checksum, name, version, requested access, and build provenance. There is no central kill switch; moderation can hide a catalog listing but the signed release stays published.
32