Deprecate dynamic plugins

crates/bevy_app/src/plugin.rs

@@ -124,6 +124,10 @@ impl Plugin for PlaceholderPlugin {
 /// It is used for dynamically loading plugins.
 ///
 /// See `bevy_dynamic_plugin/src/loader.rs#dynamically_load_plugin`.
+#[deprecated(
+    since = "0.14.0",
+    note = "The current dynamic plugin system is unsound and will be removed in 0.15."
+)]
 pub type CreatePlugin = unsafe fn() -> *mut dyn Plugin;
 
 /// Types that represent a set of [`Plugin`]s.

crates/bevy_derive/src/app_plugin.rs

@@ -2,6 +2,10 @@ use proc_macro::TokenStream;
 use quote::quote;
 use syn::{parse_macro_input, DeriveInput};
 
+#[deprecated(
+    since = "0.14.0",
+    note = "The current dynamic plugin system is unsound and will be removed in 0.15."
+)]
 pub fn derive_dynamic_plugin(input: TokenStream) -> TokenStream {
     let ast = parse_macro_input!(input as DeriveInput);
     let struct_name = &ast.ident;

crates/bevy_derive/src/lib.rs

@@ -19,8 +19,15 @@ use proc_macro::TokenStream;
 use quote::format_ident;
 
 /// Generates a dynamic plugin entry point function for the given `Plugin` type.
+///
+/// This is deprecated since 0.14. The current dynamic plugin system is unsound and will be removed in 0.15.
 #[proc_macro_derive(DynamicPlugin)]
+#[deprecated(
+    since = "0.14.0",
+    note = "The current dynamic plugin system is unsound and will be removed in 0.15."
+)]
 pub fn derive_dynamic_plugin(input: TokenStream) -> TokenStream {
+    #[allow(deprecated)]
     app_plugin::derive_dynamic_plugin(input)
 }
 

crates/bevy_dynamic_plugin/src/lib.rs

@@ -9,12 +9,23 @@
 //! This crate allows loading dynamic libraries (`.dylib`, `.so`) that export a single
 //! [`Plugin`](bevy_app::Plugin). For usage, see [`dynamically_load_plugin`].
 //!
+//! # Deprecation
+//!
+//! The current dynamic plugin system is unsound and will be removed in 0.15. You may be interested
+//! in the [Alternatives](#alternatives) listed below. If your use-case is not supported, please
+//! consider commenting on [#13080](https://github.com/bevyengine/bevy/pull/13080) describing how
+//! you use dynamic plugins in your project.
+//!
+//! # Warning
+//!
 //! Note that dynamic linking and loading is inherently unsafe because it allows executing foreign
 //! code. Additionally, Rust does not have a stable ABI and may produce
 //! incompatible libraries across Rust versions, or even subsequent compilations. This will not work
 //! well in scenarios such as modding, but can work if the dynamic plugins and the main app are
 //! built at the same time, such as with Downloadable Content (DLC) packs.
 //!
+//! # Alternatives
+//!
 //! You may be interested in these safer alternatives:
 //!
 //! - [Bevy Assets - Scripting]: Scripting and modding libraries for Bevy

crates/bevy_dynamic_plugin/src/loader.rs

@@ -1,4 +1,5 @@
 #![allow(unsafe_code)]
+#![allow(deprecated)]
 
 use libloading::{Library, Symbol};
 use std::ffi::OsStr;
@@ -8,6 +9,10 @@ use bevy_app::{App, CreatePlugin, Plugin};
 
 /// Errors that can occur when loading a dynamic plugin
 #[derive(Debug, Error)]
+#[deprecated(
+    since = "0.14.0",
+    note = "The current dynamic plugin system is unsound and will be removed in 0.15."
+)]
 pub enum DynamicPluginLoadError {
     /// An error occurred when loading a dynamic library.
     #[error("cannot load library for dynamic plugin: {0}")]
@@ -30,6 +35,10 @@ pub enum DynamicPluginLoadError {
 /// foreign code, initialization routines may be run (as well as termination routines when the
 /// program exits). The caller of this function is responsible for ensuring these routines are
 /// sound. For more information, please see the safety section of [`libloading::Library::new`].
+#[deprecated(
+    since = "0.14.0",
+    note = "The current dynamic plugin system is unsound and will be removed in 0.15."
+)]
 pub unsafe fn dynamically_load_plugin<P: AsRef<OsStr>>(
     path: P,
 ) -> Result<(Library, Box<dyn Plugin>), DynamicPluginLoadError> {
@@ -51,6 +60,10 @@ pub unsafe fn dynamically_load_plugin<P: AsRef<OsStr>>(
 }
 
 /// An extension trait for [`App`] that allows loading dynamic plugins.
+#[deprecated(
+    since = "0.14.0",
+    note = "The current dynamic plugin system is unsound and will be removed in 0.15."
+)]
 pub trait DynamicPluginExt {
     /// Dynamically links a plugin at the given path, registering the plugin.
     ///