401/403 are permission-related statuses, which do not make sense to be used in this context IMHO.
Updated to reflect 410 Gone rather than 401.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/410
The HyperText Transfer Protocol (HTTP) 410 Gone client error response code indicates that access to the target resource is no longer available at the origin server and that this condition is likely to be permanent.
There's three statuses we can use here:
- 200 (Current)
- 404 (Temporarily not here)
- 410 (Permanently gone, no longer exists).
When a plugin is closed, we currently return a robots noindex tag for closed plugins but keep 200 as the status code.
I don't think we should return 404 for plugins that exist, but are no longer available.
410 Makes the most sense to me.