Thanks, Michael, for the detailed response. I love these kinds of details. I'm glad realize that things are not ideal.
Please note that no solution we do will prevent a plugin developer from simply removing their plugin from our store. They still retain ownership of their software.
I understand they still retain ownership of their software, and if a plugin developer decides to take his plugin down from the store, he should be allowed to do that. And when it's removed, no *new* people should be able to get it, but anyone who already activated it (and possibly integrated it into their app) should not be affected.
That should be part of the rules for writing a plugin and putting it in the store. Once activated, that person should be able to use it forever.
[Granted, if that plugin relied on some sort of server infrastructure (like a cloud service), and the infrastructure went away, there's not much that can be done about that. But a user who activated it should still have access to that plugin. The plugin would just become useless, as it wouldn't be able to connect to the server anymore.]
Not that anyone in the Corona community would do this (everyone here is generally nice and helpful, at least in my experience), but the way this is now could enable a nefarious developer to do this:
1. Take down a popular plugin.
2. Force app developers who integrated it to pay a ransom in order to update their apps.
3. Put the plugin back in the store.
4. Every so often, repeat.
Since Corona Enterprise is detached from our server build system you will not get any automatic updates to plugins
Perhaps the Corona Simulator could be setup to detect that there are plugin updates and allow you to get them or not. The console could let you know that your plugin has an update available, and then you could just go to a menu option in the Simulator like "Plugin Manager" and see what version you currently have, and be able to update to the new version from there. Still, I guess that requires a proper versioning system, which might not exist yet... And it would still be better if I could pick a specific version.
All of this is because I really, really want to use the QR Code Scanner plugin for a project I'm working on, but I don't feel comfortable with it right now for the reasons outlined above *and* because the plugin developer (Lerg) seems to have disappeared. (No activity from him for nearly 11 days, and now his website is down... It worries me.) His contributions to the Corona community have always been pretty stellar.