[wp-meta] [Making WordPress.org] #5509: Notify users of changes to plugin ownership

Making WordPress.org noreply at wordpress.org
Mon Nov 16 20:15:08 UTC 2020

#5509: Notify users of changes to plugin ownership
 Reporter:  ianatkins         |       Owner:  (none)
     Type:  enhancement       |      Status:  new
 Priority:  normal            |   Milestone:
Component:  Plugin Directory  |  Resolution:
 Keywords:                    |
Changes (by Ipstenu):

 * type:  defect => enhancement


 Currently we do track (on the backend) when new users are added as
 committers and when the owner account is changed.

 While we can make that a forward facing page (audit log) and in theory
 include things like "closed for security on DATE", the biggest flaw is
 that ... we sometimes won't know.

 Take this for a practical example of what's happened before. Someone
 builds out a plugin and it's owned by a 'company' (CoolWPPlugins.com).
 They later sell the company (which includes the ownership of the user
 account) to someone else. New owners, but there's nothing we could track.

 This would not be tracked by WordPress, nor could it be, any more than any
 other software you use. Microsoft bought out Skype and your updates
 merrily continued.

 Basically ... I don't know that there's a way to monitor and enforce that,
 as much as I'd like it.

Ticket URL: <https://meta.trac.wordpress.org/ticket/5509#comment:1>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org

More information about the wp-meta mailing list