Out of curiosity, does Backdrop have a similar vetting process for modules as on drupal.org? I'm trying to rework this section of Drupal for Humanists and I'm not sure how much of it is still relevant, or what separate assurances can be made for modules on backdropcms.org.
Relatedly, am I right in getting the sense that, given this smaller community, there's fewer people publishing modules separately on Github? (There's at least one major digital humanities Drupal development company that publishes its modules only on Github; I may end up trying my hand at porting some of those modules to Backdrop.)
The text for the section is below:
As a general rule, you should only install modules that you have downloaded from backdropcms.org. For a module to be listed on backdropcms.org, it has to meet the Backdrop coding standards (which require, among other things, that the code be well-commented to make it easier for other programmers to understand), pass a series of automated tests, and be free of identified security holes (which could put your site in jeopardy of being hacked). While the degree to which modules are actively maintained does vary, if a security hole is found in a module, the module will be removed from backdropcms.org if it is not updated to address the problem in a timely manner.
There are many modules that are published on Github, or on project websites. In some cases, the developers don’t feel like it’s worth publishing the module on backdropcms.org because it’s designed for a niche audience. In other cases, publishing the module on Github is a way to make a module available while it is waiting to be reviewed on backdropcms.org. Many well-known Backdrop modules that have been developed for digital humanities are not distributed on backdropcms.org. For modules that aren’t distributed on backdropcms.org, it’s harder to get information on how many people have the module installed, and it may be more difficult to find out how well the module works, depending on whether there’s a pointer to an active issue queue. There’s also no guarantee that the code meets Backdrop coding standards. Nonetheless, at least for modules developed within the digital humanities community, you may be able to alleviate your concerns through typical communication channels (e.g. inquiring on Twitter or DH Answers), or even asking the developers directly. You can also send an email to the Backdrop for Humanists mailing list, linked from the Backdrop for Humanists site. Particularly since these modules are designed specifically to address digital humanities use cases, they should not be considered off-limits due to the way they are distributed, but a little extra caution is beneficial.