How each provider has actually behaved on this machine — attempts, how often they worked, how long they took, and what the last failure said. Worst first. An extension listed as never tried is not broken; nothing has reached it yet, usually because another provider earlier in your service order keeps succeeding first.

The verified sessions extensions use to talk to their gateway, and when each one expires. An expired session is renewed with a new verification the next time it is needed. Orphaned ones were left behind by an extension update and are never used again.

Registry URLs tell SpotiFLAC where to look for installable extensions. Sources can come from a terminal export, from a .env file, or be added here. You can remove any of them, including ones set outside the app.

A directory lists registries (not extensions directly) for you to review. Nothing here is bundled either — add a directory URL someone shared with you, then click Discover to probe each registry it lists for reachability before deciding whether to add it above.

A registry's sha256 checksum proves a package wasn't corrupted in transit — it says nothing about who published it. Trust a maintainer's public key here to verify their signed entries too; unsigned entries are exactly as trusted as they are today.