Comment

Comment by DoubleGlazing

I agree, If I were an IT manager this sort of stuff would make me start looking at alternatives.

If an app/pluging/package is maintrained and published by X, I want to make sure no one else can interefere with it - even if they have good intentions.

What Automattic should have done is removed the plugin from distribution and told WP Engine to fix the problem. By doing what they did they have breached the trust of their users.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton