To define a plugin we can use purl:
pkg:gitroot/gitroot/apex@0.4.0?registry=gitroot.dev%2Freleases%2F0.3.0&checksum=sha256
Meaning: a package for gitroot with gitroot scope and apex name at version 0.4 is accessible with registry gitroot.dev/releases/0.3.0 and checksum
Should be used everywhere a plugin name is (.gitroot/plugins.yml) but also in plugins section to b installed.
With that in place we can start to reflect to registry. A registry should give infos of packages, from a purl we get:
1name: Apex
2version: 0.4.0
3homepage: https://gitroot.dev/app/plugins/apex/
4doc: https://gitroot.dev/app/plugins/apex/doc.html
5changelog: https://gitroot.dev/app/plugins/apex/CHANGELOG.html
But also all versions. Maybe an author?