Magento Marketplace User Guide

Technical Review Guidelines

During Technical Review, your code is examined to detect the presence of viruses, malware, and any indication of plagiarism. The process also ensures that the package meets Composer packaging and format requirements and Magento coding standards.

As part of the Extension Quality Program, we have added an automated production installation test and manual QA to Technical Review. These new checks require additional time for us to properly evaluate all existing extensions.

Validate: Verify Package for Required Files

The submitted package must be a Magento module, theme, language pack, or metapackage, that meets Composer packaging and format requirements. All Magento modules, themes, and language packs must contain a composer.json and registration.php file.

  • Required Files

    All

    composer.json

    registration.php

    Module

    etc/module.xml

    Theme

    theme.xml

    Language Pack

    language.xml

    Metapackage

    composer.json

Developers of Magento 2.x extensions can use the validation tool to test the package before it is submitted to Magento Marketplace. To download the tool, see the Marketplace Tools GitHub repository.

See also:

PHP Developer Guide

How to Package Magento Extensions

Coding Standards: Check Code Quality/Syntax

The Marketplace coding standard review uses a custom set of coding sniffs. If the submitted code fails to pass the review, a technical report is generated that describes each issue found, and its location in the codebase. See the Magento Marketplace user guide for a list of the code validation rule sets.

See also: Coding Standards

Security: Check for Viruses and Malware

All submissions to Magento Marketplace are run through a malware scan to ensure that the codebase is free of malware.

Intellectual Property: Check for Plagiarism

All code and marketing content that is submitted to Magento Marketplace is checked for plagiarism to ensure that it has not been copied from existing Marketplace extensions or from the Magento codebase.

If the extension contains source code from the Community Edition of Magento 1.x or 2.x, the extension must be licensed under Open Source License v. 3.0 and properly credit Magento, Inc.

See also: OSL 3.0: A Better License for Open Source Software

Installation: Verify that Product Installs Correctly

Extensions for Magento 2.x are installed with Varnish Cache enabled for each supported version of PHP, and switched from development to production mode. You will be notified if your extension fails the test. If it cannot be fixed promptly, the extension will be suspended from Magento Marketplace.

See also: Magento System Requirements

Page Caching: Verify that Varnish Works Correctly

In addition to the Production Mode test, cacheable pages are accessed to ensure that they are served directory from Varnish Cache. You will be notified if your extension fails the test. If it cannot be fixed promptly, the extension will be suspended from Magento Marketplace.

See also: Configure and Use Varnish

Quality Assurance: Pass Manual QA

This check verifies that the extension installs without error, is configurable (as applicable), and operates as expected. To pass Manual QA, the extension must meet the following requirements:

  • Installs with Composer,
  • Compiles without errors using the following command: deploy:mode:set production
  • Works with each version of Magento that is shown as supported in the extension product profile.
  • Works with each version of PHP that is supported by the Magento version that is shown as supported in the extension product profile.
  • Has all functionality that is described in the extension documentation.
  • Does not crash with unhandled errors.
  • Does not hang when invalid data is submitted.
Technical Report

When the review is complete, a link to the resulting Technical Report appears in the profile of the extension, theme, or package that was submitted for review.


Technical Report