Loading...
Loading...
A snapshot of the Obsidian plugin ecosystem
Data collected from 2,698 plugins in the community registry.
2,698
Plugins Surveyed
80.1%
Use esbuild
78.0%
Have Lockfiles
52.2%
Have CI/CD
esbuild dominates — used by 80% of plugins. Rollup holds second place, commonly via the official Obsidian plugin template. A small fraction use no build step at all, typically simple plugins shipping plain JavaScript.
| Tool | Count | % |
|---|---|---|
| esbuild | 2,160 | 80.1% |
| rollup | 302 | 11.2% |
| other | 105 | 3.9% |
| none | 104 | 3.9% |
| tsc | 14 | 0.5% |
| webpack | 13 | 0.5% |
78.0% of plugins include a lockfile. npm lockfiles are by far the most common, followed by pnpm and yarn. Plugins without a lockfile cannot have their builds verified — dependency versions may have drifted since release.
| Type | Count | % |
|---|---|---|
| npm | 1,639 | 60.7% |
| pnpm | 260 | 9.6% |
| yarn | 206 | 7.6% |
| none | 593 | 22.0% |
Node.js version distribution from CI workflow configs. 1,250 plugins specify a Node version in their CI configuration. The table below shows major version distribution.
| Node Version | Count | % of CI plugins |
|---|---|---|
| 25 | 2 | 0.2% |
| 24 | 24 | 1.9% |
| 23 | 8 | 0.6% |
| 22 | 67 | 5.4% |
| 21 | 22 | 1.8% |
| 20 | 177 | 14.2% |
| 19 | 6 | 0.5% |
| 18 | 667 | 53.4% |
| 17 | 4 | 0.3% |
| 16 | 77 | 6.2% |
52.2% of plugins have a release workflow in their repository. Among those using CI, package manager detection shows a strong preference for pnpm over npm — likely reflecting newer, more actively maintained plugins.
| Package Manager (CI) | Count | % of CI plugins |
|---|---|---|
| pnpm | 101 | 7.2% |
| npm | 15 | 1.1% |
| yarn | 5 | 0.4% |
Plugins are classified by how recently they released an update. Active plugins released within the last 6 months. Slow plugins last released 6-12 months ago. Stale plugins have not released in over a year.
| Tier | Count | % |
|---|---|---|
| active | 828 | 30.7% |
| slow | 422 | 15.6% |
| stale | 1,448 | 53.7% |
Security disclosure practices are rare in the ecosystem. Only 20 plugins (0.7%) include a SECURITY.md file. This is consistent with the ecosystem being largely hobby and productivity software rather than security-critical infrastructure.
Build verification attempts to reproduce each plugin's published release from source and compare the output. Several conditions can block verification. The most significant blocker is missing lockfiles — affecting 22.0% of plugins. Git dependencies and SASS usage are present but uncommon. Native modules are extremely rare.
| Blocker | Count | % |
|---|---|---|
| No lockfile | 593 | 22.0% |
| No tags | 0 | 0.0% |
| SASS | 73 | 2.7% |
| Git dependencies | 57 | 2.1% |
| Native modules | 1 | 0.0% |
| 15 | 1 | 0.1% |
| 14 | 194 | 15.5% |
| 12 | 1 | 0.1% |