[wp-trac] [WordPress Trac] #30465: Dashboard alert if a plugin was removed from WordPress plugins repo

WordPress Trac noreply at wordpress.org
Sun Dec 28 18:55:23 UTC 2014


#30465: Dashboard alert if a plugin was removed from WordPress plugins repo
------------------------------------+----------------------
 Reporter:  sergej.mueller          |       Owner:
     Type:  feature request         |      Status:  closed
 Priority:  normal                  |   Milestone:
Component:  Security                |     Version:
 Severity:  normal                  |  Resolution:  wontfix
 Keywords:  has-patch dev-feedback  |     Focuses:
------------------------------------+----------------------
Changes (by nacin):

 * status:  new => closed
 * resolution:   => wontfix
 * milestone:  Future Release =>


Comment:

 We need to get a lot better about how we handle plugin removals. Most of
 the time, it ''isn't'' for security. But users are still left in the cold
 simply because someone has decided to stop wanting to maintain it. I
 actually dislike this practice, and would rather see it be put into some
 kind of "abandoned and waiting to be adopted" mode. Perhaps preventing new
 downloads and notifying users, but not outright closing the page. Once you
 put it in the directory, you don't really have the option to make it seem
 like it never existed. Other app stores usually resolve this by allowing
 people to still access the app's page (and even install it on new devices)
 as long as you installed it via your account before it was removed.

 When it ''is'' for security, well, we need to do better at this. But I'm
 not inclined to change anything in core without first establishing better
 .org procedures and policies. This is a much larger discussion and doesn't
 lend itself well to a bug report.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/30465#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list