Topic

Package Registry Governance

The rules and enforcement mechanisms by which public package repositories decide what they will host and distribute to downstream installations.

Current clusters

security1 publisher

Automated scoring now decides whether a WordPress plugin release reaches the update API

The WordPress.org update API will refuse any plugin release its own scoring calls high risk. The decision moves off a team member's inbox and onto a threshold the announcement does not publish.

Publishers:helpnetsecurity.com

Reality

Evidence55
Adoption68
Hype gap+15
Incentives60
Confidence58