- Platform-aware dependency resolution (Modrinth preferred, Spiget fallback)
- Async scan/download; download queue shown in `/depo status`
- i18n via `messages.yml` (all user-facing texts)
- bStats metrics (configurable service-id)
- Update checker (notify-only)
- Security: option to block non-HTTPS downloads
- Manual downloads: `/depo download direct|github` (+ shortcuts `/depo s`, `/depo dl`)
- Optional SHA-256 checksum validation
- Overrides and aliases support
- Notifications include requiring plugin names
- Persistent install log at `plugins/Depo/installed.log`
- Switched JSON parsing to kotlinx-serialization
- Fix: prevent repeated re-downloads (e.g., Vault) via provides/aliases validation
- Shaded JAR with relocations to avoid classpath conflicts