Automattic Apparently Manages the WordPress.org Infrastructure  Full Document Contents/Articles/Automattic Apparently Manages the WordPress.org Infrastructure.md, Automattic Apparently Manages the WordPress.org Infrastructure, https://www.pluginvulnerabilities.com. > [!note]+ Document Notes > tags: [#wordpress, #automattic, #wpengine, #opensource, #wordpressorg] > - #mattmullenweg > - #trademark > - #opensourcegovernance > Author: Plugin Vulnerabilities > Source: Plugin Vulnerabilities Blog > Reference: [Automattic Apparently Manages the WordPress.org Infrastructure](https://www.pluginvulnerabilities.com/2024/12/02/automattic-apparently-manages-the-wordpress-org-infrastructure/?__readwiseLocation=) > date created: 2024-12-03 17:45 > > # Title: Automattic and WordPress.org: Governance, Infrastructure, and Legal Challenges > <!-- deep-read:sections start --> ## Table of Contents: - [📝 Summary](#-summary) - [📖 Main Content](#-main-content) - [🗒️ Notes](#️-notes) - [📖 References](#-references) - [🗣️ Paraphrase](#-paraphrase) - [📰 Newsletter](#-newsletter) - [✅ Action Items](#-action-items) - [🧪 Hypotheses](#-hypotheses) - [📊 Methodology](#-methodology) - [❓ Questions](#-questions) - [🔮 Future Research](#-future-research) - [💡 Implications](#-implications) - [🧠 Learning Styles Assessment](#-learning-styles-assessment) - [📊 Accessibility Assessment](#-accessibility-assessment) - [🌍 DEIB Assessment](#-deib-diversity-equity-inclusion-and-belonging-assessment) - [✅ Logical Validity](#-logical-validity) - [🔍 DARVO Analysis](#-darvo-analysis) - [🔍 SEO Evaluation](#-seo-evaluation) - [🎯 Conclusion](#-conclusion) --- ## 📝 Summary: The article investigates governance questions surrounding WordPress.org, examining Automattic’s significant role in managing its infrastructure. With conflicting legal descriptions of who controls WordPress.org—Matt Mullenweg personally or Automattic—these issues spotlight deeper concerns about transparency, governance, and funding. Contributions from Automattic employees and the company’s Chief Systems Wrangler underline their operational involvement. Meanwhile, governance ambiguities raise legal and ethical questions about the independence of WordPress.org as a community resource. --- ## 📖 Main Content: ### 🗒️ Notes - **Governance Ambiguity**: - Automattic claims a substantial role in managing WordPress.org infrastructure. - Legal filings alternately describe WordPress.org as Matt Mullenweg’s personal responsibility or an Automattic-supported entity. - Barry Abrahamson’s legal declaration omits any explicit mention of managing WordPress.org infrastructure. - **Operational Roles**: - Automattic reportedly dedicates over 3,500 hours weekly to WordPress.org operations. - Barry Abrahamson and other Automattic employees, including those formerly with Audrey Capital, contribute to WordPress.org. - Historical posts suggest challenges in securing Automattic’s timely support for WordPress.org infrastructure. - **Funding and Independence**: - Unclear who funds WordPress.org’s infrastructure—Matt Mullenweg, Automattic, or another entity. - Matt Mullenweg’s lawyers refute the idea that he personally funds all operations. - **WP Engine Block**: - Raises questions about whether Automattic employees implemented the block, impacting WP Engine users' access to repositories. --- ## 📖 References: - [Automattic Apparently Manages the WordPress.org Infrastructure](https://www.pluginvulnerabilities.com/2024/12/02/automattic-apparently-manages-the-wordpress-org-infrastructure/?__readwiseLocation=) --- ## 🗣️ Paraphrase: 1. **Original**: "Automattic contributes significant time and resources to the operation of WordPress.org, in excess of 3500 hours weekly." **Paraphrase**: Automattic allocates over 3,500 hours weekly to maintaining WordPress.org’s operations, demonstrating a significant investment of time and resources. 2. **Original**: "Various things we have run across show that Automattic plays a fairly significant role in running the website." **Paraphrase**: Evidence suggests Automattic’s active involvement in managing WordPress.org’s infrastructure. --- ## 📰 Newsletter: **Who Controls WordPress.org?** The debate over WordPress.org’s governance raises concerns about transparency and independence. Automattic’s operational involvement contrasts with legal filings asserting Matt Mullenweg’s sole control. Learn why these issues matter for open-source governance and the WordPress community’s future. [Read More](https://www.pluginvulnerabilities.com). --- ## ✅ Action Items: 1. **Governance Clarity**: - Advocate for transparent governance structures to delineate control between Matt Mullenweg, Automattic, and the WordPress Foundation. 2. **Community Engagement**: - Initiate discussions on funding models for WordPress.org to ensure independence and sustainability. 3. **Legal Insights**: - Analyze Automattic’s role in operational decisions impacting third parties, such as the WP Engine block. --- ## 🧪 Hypotheses: - Clearer governance structures could improve transparency and community trust in WordPress.org operations. ### 📊 Methodology: - Conduct a comparative analysis of governance models in open-source projects. - Survey WordPress community members on their perceptions of governance and operational transparency. --- ### ❓ Questions: - How does Automattic’s involvement in WordPress.org infrastructure affect its independence? - What funding models could ensure WordPress.org’s sustainability without reliance on Automattic? --- ### 🔮 Future Research: - Explore alternative governance frameworks to balance corporate involvement and community oversight in open-source projects. --- ### 💡 Implications: Stronger governance mechanisms could enhance trust in WordPress.org as a truly community-driven platform while mitigating legal and ethical concerns. --- ### 🧠 Learning Styles Assessment: - **Visual**: Include governance flowcharts to clarify roles. - **Aural**: Provide audio summaries of key points. - **Logical**: Offer structured analyses of governance models. --- ### 📊 Accessibility Assessment: - **Screen Readers**: Ensure legal filings and blog posts are accessible via semantic HTML. - **Text Resizing**: Verify readability with scalable fonts. --- ### 🌍 DEIB Assessment: - **Cultural Relevance**: Highlight contributions from global contributors. - **Inclusive Language**: Avoid exclusionary terminology. --- ### ✅ Logical Validity: - **Strengths**: - Deductive reasoning supports Automattic’s operational role. - **Weaknesses**: - Contradictory statements about governance undermine clarity. --- ### 🔍 DARVO Analysis: - **Deny**: Matt Mullenweg downplays Automattic’s operational role. - **Attack**: Critics question Automattic’s overreach. - **Reverse**: Automattic positions itself as essential to WordPress.org’s survival. --- ### 🔍 SEO Evaluation: - **Keywords**: “WordPress governance,” “Automattic involvement,” “open-source transparency.” - **Meta Description**: Include concise summaries emphasizing governance concerns. --- ## 🎯 Conclusion: The ongoing ambiguity around WordPress.org’s governance highlights a critical need for transparent and independent structures to maintain trust in its open-source foundation. <!-- deep-read:sections end --> ## Highlights - Because of recent actions taken by Matt Mullenweg, the control of WordPress.org has become a big security concern. It continues to be unclear who actually is in control of it. Lawyers representing Matt Mullenweg and Automattic have put forward varying explanations. In [a legal filing](https://storage.courtlistener.com/recap/gov.uscourts.cand.437474/gov.uscourts.cand.437474.33.0.pdf) on October 22, they put forward the view that Matt Mullenweg is personally in control of it: > WordPress.org is not WordPress. WordPress.org is not Automattic or the WordPress Foundation, and is not controlled by either. To the contrary, as Plaintiff itself acknowledges, WordPress.org is Mr. Mullenweg’s responsibility. Eight days later, they put forward a more nuanced explanation: > Separate from the WordPress software, from Automattic, and from the Foundation, is a website that Matt supports called WordPress.org (the “Website”). Matt is the owner of the WordPress.org domain name. Matt created the Website to support the WordPress community and software. Over time, the content the Website provides has become more robust. It takes significant resources from Matt and others to maintain the Website. For example, Matt and other employees of Automattic contribute over 3,500 hours weekly to support and maintain the Website, including the core software and other features offered through the Website. Various things we have run across show that Automattic plays a fairly significant role in running the website. A recent posting on the [WordPress.org Status Blog](https://status.wordpress.org/) adds to that, but also raises other questions. If you are not familiar with that blog, you are not alone. We were not aware of it until now. On November 13, [a post](https://status.wordpress.org/2024/11/14/on-nov-12th-2024-beginning/) was published explaining recent instability of the website. It started this way: > On Nov 12th 2024 beginning at 21:20 UTC, WordPress.org experienced intermittent elevated latency and increased error rates. These affected both the WordPress.org website and API. This initial incident was quickly resolved by the team, but reoccurred briefly on Nov 13 at 0110 UTC, 0900 UTC, and 1400 UTC. The underlying cause was network saturation of the hosting provider’s network that hosts some of the WordPress.org infrastructure. Although all of the servers and switch interfaces that our team has visibility into were within normal levels of utilization, there were some upstream network bottlenecks that created increased latency and packet loss that affected the WordPress.org environment. The author is only identified as Barry. Those following the legal back and forth going on might recognize that Barry, as it is Barry Abrahamson. Here is how he described his role at Automattic in [legal declaration](https://storage.courtlistener.com/recap/gov.uscourts.cand.437474/gov.uscourts.cand.437474.41.0.pdf) under penalty of perjury: > I am currently the Chief Systems Wrangler at Automattic, where I am responsible for running the globally distributed infrastructure that powers WordPress.com, Jetpack, WooCommerce, WordPress.com VIP, WP Cloud, and Pressable, among others. I joined Automattic in April 2006 as a consultant and started full-time in May 2007. I have been with the company in a Systems Wrangler role for around seventeen years. As with other things he neglected to mention in that, he didn’t mention any role managing WordPress.org, only saying this: > As part of my role as Chief Systems Wrangler at Automattic, I regularly work with the WordPress software platform, and am also familiar with the website located at www.WordPress.org (the “Website”). Automattic contributes significant time and resources to the operation of the Website, in excess of 3500 hours weekly. That wasn’t Barry’s first post on that blog. The first one was in 2017 and he later posted in 2020, 2021, and 2022. He has written the last three posts on the blog. Curiously, [Barry Abrahamson’s WordPress profile](https://profiles.wordpress.org/barry/) makes no mention of Automattic sponsoring him for any time spent on WordPress. Some of the other posts on that blog were written by current or former employees of Audrey Capital, Matt Mullenweg’s investment vehicle. Posts also come from two other current or former Automattic employees. One of them worked both at Audrey Capital and Automattic. In a [post on his own blog](https://www.delta.blog/the-integration-of-wordpress-wordpress-org/) last week that former employee of both, Samuel Sidler, made this interesting comment: > When I worked at both Audrey Capital and Automattic, I helped oversee design and development of the WordPress.org website. One of the many pain points at the time was getting support from Automattic’s systems team—led by Abrahamson—which maintained the infrastructure of WordPress.org. Requests were posted to [a public make/systems “P2” blog](https://make.wordpress.org/systems/?ref=delta.blog)—resolutions were anything but swift. Among the questions this raises is if the block of WP Engine’s customers’ websites from WordPress.org systems was done by Automattic employees. There is also the important question of who is paying for the WordPress.org infrastructure. Especially when Matt Mullenweg is making it seem like he might be personally spending millions of dollars a year on it ([something his lawyers appear to disagree with](https://www.pluginvulnerabilities.com/2024/11/04/matt-mullenweg-and-his-lawyers-have-very-different-estimates-as-to-the-cost-of-running-wordpress-org/)). We have reached out to Samuel Sidler to suggest he provide a follow up with more details on the handling of the infrastructure of WordPress.org. Related posts: 1. [Automattic Can’t Decide if WordPress.org is a Previously Undisclosed Non-Profit or If It is Just Matt Mullenweg](https://www.pluginvulnerabilities.com/2024/10/07/automattic-cant-decide-if-wordpress-org-is-a-previously-undisclosed-non-profit-or-if-it-is-just-matt-mullenweg/) 2. [Who or What is WordPress.org?](https://www.pluginvulnerabilities.com/2024/10/02/who-or-what-is-wordpress-org/) 3. [Matt Mullenweg’s Claim About the Revocability of the Automattic’s License of the WordPress Trademark is Disputed by the License](https://www.pluginvulnerabilities.com/2024/10/02/matt-mullenwegs-claim-about-the-revocability-of-the-automattics-license-of-the-wordpress-trademark-is-disputed-by-the-license/) 4. [WordPress’ Latest Canonical Plugin WPGraphQL is Still Using Vulnerable Version of Library 18 Months Later](https://www.pluginvulnerabilities.com/2024/10/09/wordpress-latest-canonical-plugin-wpgraphql-is-still-using-vulnerable-version-of-library-18-months-later/) [Plugin Vulnerabilities](https://www.pluginvulnerabilities.com) Posted in [Analysis](https://www.pluginvulnerabilities.com/category/analysis/), [WordPress Plugin Vulnerability News](https://www.pluginvulnerabilities.com/category/news/) [Automattic](https://www.pluginvulnerabilities.com/tag/automattic/), [WordPress.org](https://www.pluginvulnerabilities.com/tag/wordpress-org/) [Leave a comment](https://www.pluginvulnerabilities.com/2024/12/02/automattic-apparently-manages-the-wordpress-org-infrastructure/#respond) ([View Highlight](https://read.readwise.io/read/01je6qyms086fe1wqax49ypkv7)) - WordPress.org is not WordPress. WordPress.org is not Automattic or the WordPress Foundation, and is not controlled by either. To the contrary, as Plaintiff itself acknowledges, WordPress.org is Mr. Mullenweg’s responsibility. ([View Highlight](https://read.readwise.io/read/01je6r2kqpndfca43k8cfrq7z2)) - Separate from the WordPress software, from Automattic, and from the Foundation, is a website that Matt supports called WordPress.org (the “Website”). Matt is the owner of the WordPress.org domain name. Matt created the Website to support the WordPress community and software. Over time, the content the Website provides has become more robust. It takes significant resources from Matt and others to maintain the Website. For example, Matt and other employees of Automattic contribute over 3,500 hours weekly to support and maintain the Website, including the core software and other features offered through the Website. ([View Highlight](https://read.readwise.io/read/01je6r32n3xz6qkvdfgfdnxdb1)) - The author is only identified as Barry. Those following the legal back and forth going on might recognize that Barry, as it is Barry Abrahamson. Here is how he described his role at Automattic in [legal declaration](https://storage.courtlistener.com/recap/gov.uscourts.cand.437474/gov.uscourts.cand.437474.41.0.pdf) under penalty of perjury: > I am currently the Chief Systems Wrangler at Automattic, where I am responsible for running the globally distributed infrastructure that powers WordPress.com, Jetpack, WooCommerce, WordPress.com VIP, WP Cloud, and Pressable, among others. I joined Automattic in April 2006 as a consultant and started full-time in May 2007. I have been with the company in a Systems Wrangler role for around seventeen years. ([View Highlight](https://read.readwise.io/read/01je6r3mngync37x5cjzqa3wcw)) - As part of my role as Chief Systems Wrangler at Automattic, I regularly work with the WordPress software platform, and am also familiar with the website located at www.WordPress.org (the “Website”). Automattic contributes significant time and resources to the operation of the Website, in excess of 3500 hours weekly. ([View Highlight](https://read.readwise.io/read/01je6r43pjs3fcp9a201m4qa2x)) - Curiously, [Barry Abrahamson’s WordPress profile](https://profiles.wordpress.org/barry/) makes no mention of Automattic sponsoring him for any time spent on WordPress. ([View Highlight](https://read.readwise.io/read/01je6r4df6wda1hww2pk87p1j8)) - When I worked at both Audrey Capital and Automattic, I helped oversee design and development of the WordPress.org website. One of the many pain points at the time was getting support from Automattic’s systems team—led by Abrahamson—which maintained the infrastructure of WordPress.org. Requests were posted to [a public make/systems “P2” blog](https://make.wordpress.org/systems/?ref=delta.blog)—resolutions were anything but swift. ([View Highlight](https://read.readwise.io/read/01je6r54bfqdem3y0v5em3bt7v))