[jira] [Resolved] (CB-7317) Prevent Spam and abuse in plugin registry

["Jesse MacFadyen (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CB-7317?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jesse MacFadyen resolved CB-7317.
---------------------------------
    Resolution: Unresolved

We no longer maintain our own registry.  npm it all! Closing.

> Prevent Spam and abuse in plugin registry
> -----------------------------------------
>
>                 Key: CB-7317
>                 URL: https://issues.apache.org/jira/browse/CB-7317
>             Project: Apache Cordova
>          Issue Type: Improvement
>          Components: Registry
>    Affects Versions: 3.5.0
>            Reporter: GooggleAdmob
>              Labels: security
>
> Hi there, I am reporting spam and abuse on plugin:
> com.admob.admobplugin
> com.google.admob
> I have strong reason to believe this author is abusing apache plugin registry with cheat behavior.
> http://plugins.cordova.io/#/package/com.google.admob
> the downloads increase from 0 to 16471 in 2 days.
> https://github.com/gooogleadmob/admob-phonegap/stargazers
> there are 54 stars, but most of the names are spam and in pattern "jokenichl"...
> https://github.com/gooogleadmob/admob-phonegap/network
> there are 41 forks, but none is real.
> the plugin is a blackbox. there is no source code at all, all binary jar and framework libs.
> author name "gooogle" and "admob", but it's quite clear that the author are not from google or admob. just like this one I am using, it's fake but it's accpeted by system.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org