WPIntell

Source evidence

Plugin installation file not signed.

Visual Link Preview · support · 2023-07-25T00:42:00+00:00

Visual Link Preview plugin evidence original source source API
mixedsentiment
highseverity
0.88relevance
2replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

1 / 15 rows with source links

6.7% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

14 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
aslamK resolved
$ wp plugin install visual-link-preview Installing Visual Link Preview (2.2.5) Downloading installation package from https://downloads.wordpress.org/plugin/visual-link-preview.zip... The authenticity of visual-link-preview.zip could not be verified as no signature was found. Is there a reason the plugin package is not signed? See https://make.wordpress.org/core/2019/05/17/security-in-5-2/ . It’s the first time I’ve seen this. Maybe I’m misunderstanding but since it’s wordpress.org that generates the visual-link-preview.zip file and the one that hosts those files, I would expect them to generate that signature? I’m not sure what I would be able to do about that from my end? Happy to learn though! @brechtvds thanks for the quick response. I’m new to wordpress.org, so am learning myself. I’ve posted a question about this on the Everything else WordPress forum.

Comments

2 shown
Brecht 2023-07-25T07:39:00+00:00

It’s the first time I’ve seen this. Maybe I’m misunderstanding but since it’s wordpress.org that generates the visual-link-preview.zip file and the one that hosts those files, I would expect them to generate that signature? I’m not sure what I would be able to do about that from my end? Happy to learn though!

aslamK 2023-07-25T20:24:00+00:00

@brechtvds thanks for the quick response. I’m new to wordpress.org, so am learning myself. I’ve posted a question about this on the Everything else WordPress forum.