

The WordPress plugin marketplace has a trust problem.
I think that the problem is really broader — that for any system, be it Linux distros or browser plugins or AI Python packages or NPM packages or whatever — even trustworthy software can change ownership. Most users are probably not monitoring those changes and are not in a position to evaluate the impact of those changes.
Some of that can (and probably should) be handled by compartmentalizing software, limiting the effect it can have, though that has some costs of its own. But I don’t think that that’s going to handle everything.














It was clear that more use of Bugzilla would cure many of society’s ills.