Since it is often possible to fingerprint most used plugins and themes. Is there an easy way to get a metric on popularity (download count, GitHub stars/forks/issues) and maybe more importantly (last release/update/commit)?
I think this could help to set a higher standard for example by having a (enforceable) policy that does not allow for plugins or themes to be used then they have for example less than 10k downloads, 1k GitHub stars, and/or are not updated for over a year?
This could be detected externally using wpscan if the standard fingerprinting techniques are not mitigated. As well as (in the future) be enforced in WordPress with a policy when installing new plugins and themes.