how I check a plugin hasn't changed owner before updating

Atif

Since the backdoored plugins I look at this before every update of a plugin I don't maintain and once a quarter across all of them.

First the plugin page: who is the author now, are the contributors still the ones I remember and does the support tab read like a different person answering in a template.

Second, the quiet ones.

Forty minutes for twenty plugins!

anita.rath

A useful task: especially for the long-dormant plugin that suddenly makes a big update.

vijaY.jOSePh

Is once a quarter really enough for a shop with around twenty plugins, or do you end up doing the full round more often in practice?

Forty minutes each time adds up.

So i'm curious where you draw the line.

Atif

Once a quarter for all of them, that stays. And before every update I still look, that hasn't changed.

The difference is how long I look: for something that has been quiet for a long time I do the full round before i touch it, not just the quick glance.

That's where I draw the line, the quiet ones are the ones I trust least.