@yaxu i broadly agree, but in the case of WP i think its more about the fact that Matt has demonstrated the central plugin repo cannot really be trusted anymore