4 ms·
Creating an open registry would be nice, or even for developers to be able to host their own repos for others to install plugins from (à la Linux package manage
by arielcostas 2y ago
Creating an open registry would be nice, or even for developers to be able to host their own repos for others to install plugins from (à la Linux package managers), to avoid such centralisation.
Ideally, those repos would be hosted by each party, and then hosting providers would be able to host their own mirrors containing many packages for all the installs, giving a similar experience to what is now offered by Mr. Mullenweg's WP.org.
- sangnoir 2y ago> Creating an open registry would be nice, or even for developers to be able to host their own repos for others to install plugins from (à la Linux package managers), to avoid such centralisation. The security trade offs for this would not be worth it, IMO, considering WPs auto-updating features.
- ChocolateGod 2y agoOne could create a registry that uses PSK similar to mobile applications so a install only auto accepts an updated package if it's signed by the author. Would prevent the issue above.