The most trusted WordPress plugin signal is also the most gameable

The WordPress plugin directory has a trust problem hiding in plain sight. Its most visible number, the active-install count, is also the one number anyone with distribution can manufacture. I pulled the whole directory apart to measure how often that happens, and the pattern is bigger and more recent than I expected. Install count is [ ] Source