I am a long-time user of this plugin. I installed the first update by the new plugin owner on a test site and immediately noticed problems, so did not install it (or any subsequent updates) on any live sites.

My sites have not, therefore, been harmed by this episode. But I have been following closely what has been going on.

What is missing from Sarah's report is the shocking treatment meted out to David Law by the wordpress.org moderators. He even had his account suspended for a time!

He was essentially acting as a whistle-blower, and yet got treated as if it were he who was in the wrong.

Not for the first time, moderator Jan Dembowski behaved like a bully.

And Mika Epstein's own explanation of how this episode was allowed to unfold as it did paints her as naive in the extreme.

To err is human. But their repeating the same mistakes in future would be less forgivable.

A public apology to David Law would not go amiss.