wip

Author: tangrufus

README.md

@@ -112,13 +112,24 @@ Moreover, even if a plugin is closed, its existing versions are still downloadab
 
 To catch these closed plugins, `WP Org Closed Plugin` queries [WordPress.org API](https://codex.wordpress.org/WordPress.org_API#Plugins) to check whether a plugin is closed and mark them as abandoned in Composer.
 
+## What to do when a plugin is closed
+
+It depends on the reason [why the plugin is closed](https://developer.wordpress.org/plugins/wordpress-org/alerts-and-warnings/#reasons-why-plugins-are-closed).
+
+For security concerns, you should stop using the plugin immediately.
+
+For [plugin exodus](https://wptavern.com/developers-remove-plugins-from-wordpress-org-repository-after-acf-controversy), you should install the plugin via the new repository suggested by the plugin author.
+
+For other reasons, you should do your own research.
+
+
 ## Caveats
 
 ### <q>No longer maintained</q>
 
 Composer hardcodes the message <q>no longer maintained</q> for abandoned packages.
 
-Plugins closed on WordPress.org may be closed for various reasons - some are permanent, some are temporary.
+Plugins closed on WordPress.org may be [closed for various reasons](https://developer.wordpress.org/plugins/wordpress-org/alerts-and-warnings/#reasons-why-plugins-are-closed) - some are permanent, some are temporary.
 The message <q>no longer maintained</q> may not be accurate in some cases.
 
 You should check the plugin's WordPress.org page for more details.