2012-05-16, 08:24:49
shawn_a Wrote:mikeh Wrote:shawn_a Wrote:seems kind of risky, someone could take over a well trusted plugin and insert malicious code.Collaborators would be chosen by plugin author. Someone can just as easily create their own plugin and insert malicious code.
It not like there is a code review process as with open source projects.
True but the effects of an update to a well established and highly used plugin is much more riskier, most new plugins get vetted by the community in forums, updates not as much, plus a large user base.
It would be the authors responsibility to entrust the right individuals. Maybe there would be a max amount of collaborators. The author should also take responsibility if any malicious code was uploaded. Maybe a min amount of forum posts/plugins as well to be eligible.