+1 that would be very useful. This mirror implementation at least mirrors the official wordpress.org plugin json metadata and checksum files so you can verify a

+1 that would be very useful. This mirror implementation at least mirrors the official wordpress.org plugin json metadata and checksum files so you can verify as well https://github.com/centminmod/wordpress-plugin-mirror-poc#how-it-works https://github.com/centminmod/wordpress-plugin-mirror-poc#ho... Though still limiting as you can only checksum files after plugin installation. You probably need a staging WordPress install to verify mirror plugins before rolling out for production usage