4 ms·
> Creating an open registry would be nice, or even for developers to be able to host their own repos for others to install plugins from (à la Linux package mana
by sangnoir 2y ago
> Creating an open registry would be nice, or even for developers to be able to host their own repos for others to install plugins from (à la Linux package managers), to avoid such centralisation.
The security trade offs for this would not be worth it, IMO, considering WPs auto-updating features.
- ChocolateGod 2y agoOne could create a registry that uses PSK similar to mobile applications so a install only auto accepts an updated package if it's signed by the author. Would prevent the issue above.