The FAIR Package Manager for WordPress

Jun 23, 2025

Guest

Carrie Dils

Guest

Karim Marucchi

Karim Marucchi, CEO of CrowdFavor and board member of the Captain Planet Foundation, joins longtime WordPress developer and instructor Carrie Dils, co-chair of the FAIR project. They dive into the FAIR Package Manager, discussing its potential to revolutionize WordPress plugin distribution with a decentralized system. The duo highlights the importance of resilience, transparency, and community governance in plugin management. They also tackle critical issues like data privacy and security, advocating for collaborative solutions that enhance the WordPress ecosystem.

Ask episode

AI Snips

Chapters

Transcript

Episode notes

INSIGHT

FAIR Enables Distributed Package Management

FAIR is a new package manager architecture for WordPress aimed to eliminate single points of failure in plugin and theme distribution.
It introduces federated and independent repositories, leveraging nodes worldwide for redundancy and resilience.

INSIGHT

Protocol Governs Node Participation

FAIR introduces a protocol with rules of engagement to ensure node compliance, privacy, and moderation.
This enables nodes worldwide to participate without centralized gatekeeping, increasing ecosystem transparency and safety.

INSIGHT

FAIR Enhances Plugin Security

FAIR aims to maintain or improve plugin security standards through automated and community moderation plus advanced scanning partnerships.
It surpasses current checks on WordPress.org by introducing more transparent and federated security measures.

Get the Snipd Podcast app to discover more snips from this episode

Get the app

In this episode of The WP Minute+, I sit down with Carrie Dils and Karim Marucchi to talk through FAIR—short for Federated and Independent Repositories—a new package management project launched under the Linux Foundation. If you're in the WordPress space and wondering what FAIR is, why it matters, and how it might change the plugin and theme ecosystem, this is the episode for you.

Carrie, one of FAIR’s elected co-chairs, walks us through the technical architecture and vision for FAIR, including how it aims to bring more resilience and transparency to how plugins and themes are distributed. Karim adds broader context from his enterprise experience, making the case for why redundancy and federation are vital for WordPress's future. We touch on the practical details of how FAIR works today—including Fastly nodes, AspirePress, and the .3 plugin release—while looking ahead at governance, funding, and how the Linux Foundation structures this initiative.

Of course, I have some tough questions: How will FAIR balance governance with innovation? Will it become “just another bureaucracy”? How do we avoid turning this into a divisive issue—FAIR vs. .org? We talk about those tensions and the team's intention for FAIR to extend WordPress, not split it. There’s also a good reality check on how plugin moderation, security scanning, and transparency are being improved through this effort.

Whether you're running an agency, building WordPress products, or just care about where the ecosystem is heading, this episode gives you a grounded view of what FAIR is—and what it isn’t.

Great Takeaways & Quotes:

"This isn’t a fork. This is a failover." — Karim Marucchi
"FAIR isn't just about today’s plugin distribution problems—it’s about creating a foundation for the next 20 years of WordPress."
"We’re building a system where plugin trust, provenance, and availability don’t rely on a single choke point."
"Yes, FAIR is about stability, but it’s also about discoverability—for both users and developers." — Carrie Dils
"We’re not trying to replace .org—we’ve invited .org to join the federation."
"Even though you don’t see a difference when you update a plugin, that’s the point. FAIR is meant to be invisible until you need it."

Important URLs Mentioned:

FAIR Project GitHub (via fair.pm)
Linux Foundation announcement on FAIR
AspirePress

★ Support this podcast ★