Dhrup, I think your idea of keeping things simple is very good. A
repository should contain only features which are essential to
functionality.
Still, it took us over 400 hours to create a plugin repository on
Elggdev.com and to make it secure. It's not a small task if you want
to make it right.
I still think we should ask Foundation to take part in creating
repository. Otherwise, how can we deal with situation where one
developer takes advantage over others by spamming on forum and eg.
posting multiple versions of the same plugin just to keep it on top of
the list? We have to have procedures against such situations. What if
this developer is you or me? What if there's a dispute between two
developrs? - we have to deal with this as well. I don't feel a
"Consortium Team" would work well here. Elgg Foundation already has
experience at running community.
I think we also need Foundation's approval to inform about non-GPL
repository on Elgg.org, otherwise idea will fail. I think Foundation
should have more control over repository - they won't have to ban
something they can control.