{"record":{"id":"13a7fb1a3ff32916","repo":"jdx/mise","slug":"paranoid-mode-is-enabled-refusing-to-install-comm-13a7fb","errorCode":null,"errorMessage":"Paranoid mode is enabled, refusing to install community-developed plugin","messagePattern":"Paranoid mode is enabled, refusing to install community-developed plugin","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"src/plugins/vfox_plugin.rs","lineNumber":335,"sourceCode":"            return Ok(());\n        }\n\n        let settings = Settings::try_get()?;\n        if !force {\n            if self.is_installed() {\n                return Ok(());\n            }\n            if !settings.yes && self.repo_url.lock().unwrap().is_none() {\n                let url = self.get_repo_url(config)?;\n                let url_string = url.to_string();\n                if !registry::is_trusted_plugin(self.name(), &url_string) {\n                    warn!(\n                        \"⚠️ {} is a community-developed plugin – {}\",\n                        style(&self.name).blue(),\n                        style(&url_string.trim_end_matches(\".git\")).yellow()\n                    );\n                    if settings.paranoid {\n                        bail!(\n                            \"Paranoid mode is enabled, refusing to install community-developed plugin\"\n                        );\n                    }\n                    if !prompt::confirm_with_all(format!(\n                        \"Would you like to install {}?\",\n                        self.name\n                    ))?\n                    .is_yes()\n                    {\n                        Err(PluginNotInstalled(self.name.clone()))?\n                    }\n                }\n            }\n        }\n\n        let prefix = format!(\"plugin:{}\", style(&self.name).blue().for_stderr());\n        let pr = mpr.add_with_options(&prefix, dry_run);\n        if !dry_run {","sourceCodeStart":317,"sourceCodeEnd":353,"githubUrl":"https://github.com/jdx/mise/blob/533346cc374382b41ec5ff70536252b2e96e725c/src/plugins/vfox_plugin.rs#L317-L353","documentation":"When installing a community-developed vfox plugin, mise warns that the code is third-party. If the `paranoid` setting is enabled, it refuses to even prompt, bailing with this message instead of asking for confirmation.","triggerScenarios":"Running `mise install <plugin>` / `mise plugin add <name> <git-url>` for a plugin that is not officially maintained, with `paranoid = true` in settings (or MISE_PARANOID=1).","commonSituations":"Corporate/security-hardened environments that enable paranoid mode; users who enabled paranoid mode earlier and forgot when adding a community plugin from the vfox registry.","solutions":["Review the plugin's source, then install it with paranoid mode disabled for that one command: `MISE_PARANOID=1=false` equivalent — set `paranoid = false` in ~/.config/mise/config.toml.","Prefer an official/core plugin or a different backend (e.g. aqua/github backend) that doesn't require the community prompt.","Vet and fork the plugin yourself and install from your own repository."],"exampleFix":"// before (~/.config/mise/config.toml)\nparanoid = true\n// after\nparanoid = false  # or: MISE_PARANOID=0 mise install nodejs","handlingStrategy":"fallback","validationCode":null,"typeGuard":null,"tryCatchPattern":"try {\n  await $`mise plugin add ${name} ${url}`;\n} catch (e) {\n  if (String(e).includes('Paranoid mode'))\n    console.error('Disable paranoid mode or use an official plugin:', e.message);\n  throw e;\n}","preventionTips":["Check whether the plugin is official/community before enabling paranoid mode.","Document the paranoid setting for your team so installs are not surprising.","Prefer core plugins or aqua/github backends in hardened environments."],"tags":["plugin","security","paranoid-mode"],"backgroundTag":"insufficient-permissions","analyzedSha":"533346cc374382b41ec5ff70536252b2e96e725c","analyzedAt":"2026-09-17T13:35:38.149Z","contentChangedAt":"2026-09-17T13:35:38.149Z","schemaVersion":2},"datasetVersion":"2026-09-23T08:17:48.524Z"}