Hacker News Reader

My advice would be to make plans to move away from WordPress entirely. While I think that the “supply chain attack” is hyperbolic, if technically true, it’s indicative of an organization that cares about winning more than ensuring any form of stability whatsoever to their users and clients. Beware.

View on HN

I agree, If I were an IT manager this sort of stuff would make me start looking at alternatives.

If an app/pluging/package is maintrained and published by X, I want to make sure no one else can interefere with it - even if they have good intentions.

What Automattic should have done is removed the plugin from distribution and told WP Engine to fix the problem. By doing what they did they have breached the trust of their users.

This is gonna be a hard move for some of the IT companies I've seen who have based their entire business around WordPress websites. They literally don't have the skill to use anything else as WP is all they know. Rip.

Good advice, but it's a subscription I'm paying on behalf of a customer for a website I made 5 years ago. It's one of the few Wordpress websites I made as I hate the development process and the bloat of it all.

Reply on news.ycombinator.com