A few years ago, while searching for a development role, I was rejected by couple of people at a company with feedback that my code sample was not of good quality. Later I got the chuckle when I noticed the same people subscribed (paid) to my service that uses the provided code sample.
- huge and powerful
- vividly maintained and extended by lots of developers
- rarely features security issues which aren't fixed immediately
... the question arises whether the quality of its code base is in this case maybe rather an academic issue.
I tried to use WordPress once. I downloaded a theme from wordpress.org with the assumption that themes are reviewed before making there. Nevertheless, I did some basic pentesting before putting my app live, and I quickly found a XSS vulnerability in the search bar of the theme (their paid version featured the same vulnerability). Maybe my experience is not to be generalised to WordPress in general, but it put me off.
WordPress plug ins are - as far as I know - not reviewed. You're at the mercy of the respective developer.
>Currently there are 224 plugins in the review queue, 198 of which are awaiting their initial review.
Pretty much the truth of any product (software or otherwise) really.
- I am a programmer (at least that's part of what I do)
- My blog is 50% about programming
Still - I don't see any reason why I would want to spend even a minute longer on the layout or some backend processes.
And I even less understand why anybody using a blog would want to or even need to use a terminal for that purpose ...
But most modern frameworks and CMS platforms seem to take for granted that everyone moved on from FTP to git ages ago, which isn't the case.
I could possibly imagine someone writing blog posts in markdown or plaintext and pushing them somewhere, but that would be the edgiest of edge cases, and even then a native app or web form would be more intuitive.
If I were actively writing a blog, it would be administered in the shell as well.
Surely the point was that the shell is unimportant for the vast majority of users, despite some HN missing its power.
From the point of view of the user, Wordpress is incredibly simple and intuitive. Don't underestimate how important it is for the average user to never see a terminal, and rarely if ever see the source code, for the application to feel comfortable to people most familiar with Windows applications and web forms. Anything more technical than that is intimidating.
Most people who use Wordpress aren't programmers, don't want to be programmers, and don't want to hire programmers to get their site up and running. The simplicity of installing new plugins and themes is far more important than the quality of the code.