Oddbean new post about | logout
 in the end this boils down to the issue of naming and trust, isn’t it?

who says plugin xyz is the one I want and is not confused with another one that is called xyz?
we still did not solve this in a usable and scalable way, did we? 
 signatures + time chain to the rescue? 
 I don't think so. I think it's more so about contributions to development versus freeloading off Automattic's work than the TM stuff. I think the TM stuff is just the proxy war. 
 Sure seems like there’s a whole lot of “personal vendetta” to it, too. 
 I was always a big fan of Matt and I've especially followed it in the early days of WP.  Automattic was always an inspiration as a company. - but I haven't followed it in the recent years and I don't know the current drama...

my comment was more about developing an alternative solution (on Nostr for example). 
in a decentralized plugin repository naming and trust is the issue, isn't it?