Introduction to Project FAIR
The Linux Foundation recently announced the FAIR Package Manager project, an open-source, distributed WordPress plugin and theme repository. This project aims to decentralize control of the repository, giving contributors and businesses additional options governed by a neutral community. The announcement was made during WordCamp Europe, a three-day conference, and it was inevitable that Matt Mullenweg, the founder of WordPress, would be asked about it.
Initial Reaction to Project FAIR
Mullenweg was asked about the project during a question and answer period, and he expressed cautious optimism. He praised the open-source nature of WordPress, stating that it can coexist with everything. However, he was reluctant to say much more, as the project had only been announced less than 24 hours prior. Mullenweg seemed a little annoyed that the FAIR project was created "in secret," with the Linux Foundation essentially ambushing WordPress and WordCamp with their announcement.
Mullenweg’s Thoughts on Project FAIR
Mullenweg stated that he thinks the beauty of WordPress is that something like the FAIR project can be written with the APIs that WordPress has. However, he didn’t want to comment too much further on it, as he had just found out about it the night before. He wished that the team had collaborated or been more transparent, but he acknowledged that they can work past that and look at it. Mullenweg turned the question away from what he might think about it and asked if this is something that WordPress users would want.
Do Users Want a Federated Repository?
Mullenweg explained the immensity of the undertaking a decentralized system for the repository. He stated that users are asking for things like finding the right plugins, knowing they’re secure, and getting updates. He also mentioned that the stats around how many sites that are hacked are from out-of-date plugins are a top priority for the plugin directory. Mullenweg emphasized that the trust and safety elements of the plugin directory are crucial, and that’s why WordPress has never been hacked.
Benefits and Challenges of Project FAIR
A WordPress contributor stepped up and asked the question again, sharing her long history with WordPress and her opinion of why the FAIR project may be useful. She explained that the FAIR project is a federated and independent repository of trusted plugins and teams under the Linux Foundation. This makes it easier for users and plugin authors to find trusted plugins, and it reduces the load on WordPress.org for every update. However, Mullenweg pointed out that a federated repository could lead to challenges like supply chain attacks, uptime issues, and difficulties in rolling out updates.
Mullenweg’s Concerns
Mullenweg expressed concerns about the complexity of a federated theme and plugin repository. He stated that it would make it much more difficult to do things like rollouts, phased rollouts, and checking for compatibility. He also mentioned that it would break all the analytics and stats that WordPress provides, which are used to make decisions. Mullenweg emphasized that the trust and safety elements of the plugin directory are crucial, and that’s why WordPress has never been hacked.
Conclusion
In conclusion, the FAIR Package Manager project is an open-source, distributed WordPress plugin and theme repository that aims to decentralize control of the repository. While Mullenweg expressed cautious optimism, he also pointed out the challenges and complexities of a federated repository. The project is still in its early stages, and it’s unclear how it will develop. However, one thing is certain – the discussion around Project FAIR has sparked a conversation about the future of WordPress and the importance of trust and safety in the plugin directory. As Mullenweg said, "I think it’s awesome that people are shipping code versus just arguing or talking or writing blog posts." The future of Project FAIR and its impact on WordPress will be interesting to watch.