In reply to Ren2049.

If developers handle security well, then there likely isn’t much, if any, information on that, since most information that is available is on claimed vulnerabilities in plugins. That data alone can’t tell you if developers have a good or bad track record.

We issue advisories for developers who we have found to have a track record of handling security poorly. We provide data on which plugins come from those developers available for free, so that could be used to filter them out. More on our advisories can be found at https://www.pluginvulnerabilities.com/security-advisories-on-wordpress-plugin-developers/