How safe are patches in the store?

[memeplex]

Can they run code (through lua externals or whatever) or open files with the same level of access than the host? I've used puredata in the past and I'm considering using plugdata inside my DAW (Bitwig) now, but I want to be careful about loading external patches, no matter how cool they sound.

[timothyschoen]

Hi! Patches from the store can execute Lua code, and similar to all pd patches, have file access. The store is not a free upload zone however, patches must be submitted to me, and I review them before uploading. If you run them in the DAW, they cannot run externals (those only work in the standalone).

I do try my best to make sure the store is completely safe, but as with any software you run on a computer, the chance of something being unsafe is never zero.

[memeplex]

Thank you! It's reassuring to know you keep an eye on them.