Nathan Wrigley interviews Lovekesh Kumar, a WordPress engineer at rtCamp, about WPM, a new, secure, Go-based package manager for WordPress plugins and themes. Lovekesh explains the pain points of managing plugins in enterprise environments, especially regarding premium plugins and security. WPM centralises package management, resolves dependencies, handles private and public plugins, and verifies packages with cryptographic signatures. The episode covers the motivation behind WPM, its features, adoption process, and its focus on improving supply chain security and workflow efficiency for WordPress developers and agencies.
