[wp-trac] [WordPress Trac] #32101: Ability to mark plugin as unmanaged

WordPress Trac noreply at wordpress.org
Mon Jul 6 19:55:08 UTC 2015


#32101: Ability to mark plugin as unmanaged
-------------------------+------------------------------
 Reporter:  damonganto   |       Owner:
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  Awaiting Review
Component:  Plugins      |     Version:  4.1.2
 Severity:  normal       |  Resolution:
 Keywords:               |     Focuses:
-------------------------+------------------------------

Comment (by Ipstenu):

 I like this idea. About once every 3-5 months it comes up that someone's
 got a self-hosted plugin that was stomped on by a new one added to .org.
 The basic idea of not updating anything flagged private or 'notorg' or
 whatever is a good idea.

 However George brings up my biggest concern (which admittedly we already
 have today)

 > Perhaps have repo parse 'private' as letting users remove their plugin
 from public view and new downloads/updates, so it never even builds zips
 of tags flagged as private in the tag readme?

 The tl;dr of my thoughts is this. I don't trust the majority plugin devs
 to handle this properly because it's a convoluted set of priorities.

 This is based solely on the volume of emails we get about 'how do tags and
 stable releases work?'

 I don't think our repo API handles the situation today in a good way.
 Right now we have five states:

 * Pending approval
 * Approved by pending upload
 * Open
 * Closed
 * Closed but serving updates (no new installs)

 We rarely use that last one. However I would be happier if the private
 flag could trigger #5, which would allow someone to close the plugin and
 allow for security updates.

 I also have a fear that people will, stupidly, edit their plugins to add
 that private flag when they want to 'fork' a plugin and leave themselves
 in a dangerous place for security updates. While, yes, they did it to
 themselves, we're enabling them to shoot their own feet.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32101#comment:19>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list