Notes on FAIR Package Manager

Had a deeper look at the FAIR package manager today. Version 1.0 of the WordPress integration plugin introduced package signatures verification (in this pull request). That means that WordPress sites can now cryptographically confirm that a downloaded plugin or theme really came from the claimed publisher (as long as you trust the keys reported by [ ] Read more