In reply to Pippinsplugins (@pippinsplugins).

@pippin, would it make sense to have plugins be reviewed if the code changes by a certain percent? I can imagine that some folks might also target an old plugin for takeover, hoping that some sites still have it installed. Get permission to update an old plugin and all of the sudden you get 100 sites that are still running it under your control. If an automated process kicked out plugins that changed by a certain % over a certain amount of time it would certainly slow down this sort of thing. It might also make sense to flag plugins that use certain php or WordPress functions to catch code that phones home and the like...