Effective 23 August 2026
Marketplace rules
These rules govern project eligibility, sponsored rank, contributor introductions, and destination review.
List a project you may represent
Each entry must represent a public open-source project. The signed-in account must own a personal repository. An organization repository must contain the documented Bidstage authorization file on its default branch. We prohibit impersonation, malware, deceptive redirects, illegal goods, and abusive content.
Source and license verification
GitHub must report an SPDX license identifier that appears in the Open Source Initiative approved catalog. Organization authorization uses a public repository file bound to the signed-in GitHub user ID. Repository metadata records a review-time snapshot and does not serve as an endorsement.
Sponsored order
The configured payment provider must confirm a successful placement charge before the ranking changes. Later purchases for the same normalized destination add to its cumulative placement total.
Project funding
A placement purchase pays Bidstage for sponsored position. Maintainers receive no part of that charge. Optional GitHub Sponsors and Open Collective links open the maintainer's selected service and do not affect sponsored rank.
Contribution requests
A maintainer may publish a help request with a link to work inside the verified repository. Opportunity order does not use placement spend. Contributors and maintainers remain responsible for repository rules, licensing, compensation, and delivery terms.
Private introductions
A contributor with a public available profile may send one private application to the recorded maintainer. Acceptance opens an append-only message thread for those two accounts. Bidstage does not create an employment, bounty, intellectual-property, or delivery agreement between them.
Placement claims
Paid position does not measure project quality and does not promise traffic, conversion, adoption, fundraising, press, or search performance.
Moderation
Checkout rejects DNS answers that point to non-public or reserved networks. Activation requires current DNS ownership and a recent public Cloudflare URL Scanner report with a safe HTTPS result and an explicit non-malicious verdict. The hourly job rechecks a bounded group of active destinations. A new private, reserved, or unresolved result pauses a listing for review; a temporary resolver outage is recorded for retry without automatic suspension. Operators may review, suspend, remove, or restore a listing for safety, legal, sanctions, card-network, or abuse reasons. A receipt holder may appeal through the private support ledger.
Questions: support@bidstage.app. Signed-in users can submit a privacy request from Account. Receipt holders can open a private support case from their receipt.