2 ms·

I guess the only way forward for now is forking WordPress and creating a new plugin registry. This should be rather easy, because all WordPress plugins are GPL

• arielcostas 2y ago
  Creating an open registry would be nice, or even for developers to be able to host their own repos for others to install plugins from (à la Linux package managers), to avoid such centralisation. Ideally, those repos would be hosted by each party, and then hosting providers would be able to host their own mirrors containing many packages for all the installs, giving a similar experience to what is now offered by Mr. Mullenweg's WP.org.
  • sangnoir 2y ago
    > Creating an open registry would be nice, or even for developers to be able to host their own repos for others to install plugins from (à la Linux package managers), to avoid such centralisation. The security trade offs for this would not be worth it, IMO, considering WPs auto-updating features.
    • ChocolateGod 2y ago
      One could create a registry that uses PSK similar to mobile applications so a install only auto accepts an updated package if it's signed by the author. Would prevent the issue above.