[wp-meta] [Making WordPress.org] #5509: Notify users of changes to plugin ownership
Making WordPress.org
noreply at wordpress.org
Mon Nov 16 20:15:08 UTC 2020
#5509: Notify users of changes to plugin ownership
------------------------------+---------------------
Reporter: ianatkins | Owner: (none)
Type: enhancement | Status: new
Priority: normal | Milestone:
Component: Plugin Directory | Resolution:
Keywords: |
------------------------------+---------------------
Changes (by Ipstenu):
* type: defect => enhancement
Comment:
Currently we do track (on the backend) when new users are added as
committers and when the owner account is changed.
While we can make that a forward facing page (audit log) and in theory
include things like "closed for security on DATE", the biggest flaw is
that ... we sometimes won't know.
Take this for a practical example of what's happened before. Someone
builds out a plugin and it's owned by a 'company' (CoolWPPlugins.com).
They later sell the company (which includes the ownership of the user
account) to someone else. New owners, but there's nothing we could track.
This would not be tracked by WordPress, nor could it be, any more than any
other software you use. Microsoft bought out Skype and your updates
merrily continued.
Basically ... I don't know that there's a way to monitor and enforce that,
as much as I'd like it.
--
Ticket URL: <https://meta.trac.wordpress.org/ticket/5509#comment:1>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org
More information about the wp-meta
mailing list