Every THE D[AI]LY BRIEF article on Claude Code plugins — enterprise AI analysis, benchmarks, vendor comparisons, and ROI frameworks for technology and business leaders. Updated as new coverage publishes.
Plugin4Shell broke SHA pinning in Claude Code, Codex, Copilot CLI and the Gemini CLI. Two shipped client fixes; the control covering everyone else is a Git host naming rule that GitHub and GitLab enforce and Bitbucket and self-hosted servers do not.
September 20, 2026 · 12 min read
A study of 77,773 Claude Code plugin commits re-classified every one by what its diff actually did. Of 8,007 commits labelled 'docs', only 16% were documentation — the rest changed what the agent does at runtime, through the exact path most review policies auto-approve.
August 31, 2026 · 12 min read