Opened 19 months ago
Last modified 19 months ago
#58214 new defect (bug)
Plugin authors should not be able to delete tags from SVN repository
Reported by: | rkaiser0324 | Owned by: | |
---|---|---|---|
Milestone: | Awaiting Review | Priority: | normal |
Severity: | normal | Version: | |
Component: | Plugins | Keywords: | |
Focuses: | Cc: |
Description
On https://developer.wordpress.org/plugins/wordpress-org/how-to-use-subversion/#delete-old-versions it notes that plugin developers may choose to delete from the SVN repository old tagged versions. I think that allowing plugin authors to rewrite history of production releases is a bad thing for WordPress to allow, much less suggest in the docs. The reason is that you may be relying on those older versions in your WordPress installation so a clean build might break without warning. E.g., if you are using wpackagist for dependency managementd, this can happen: https://github.com/outlandishideas/wpackagist/issues/497 . Since tags represent actual production releases (per the first link) WordPress should not allow tags to be deleted from the repository (or any other history to be rewritten for that matter if that's a thing in SVN), going forward.