Looking at this passwords are stored in plaintext? I see no actual “security” coming out from this. I suggest looking up some password safe keeping measures, or into 2FA apps such as Authy/GoogleAuthinticator. Hopefully TFA (my plugin) will be done soon so you can look at that as well.
The Ore plugin repository, when it eventually exists will have no such thing as name clashes. However, for your own sake I would suggest not taking Pore and Soak since those are more popular projects.
Ore-related tidbit: It seems to me that having a system where names are first-come-first-serve is an unnecessary inconvenience. Then you have to deal with pointless disagreements like this one instead of actually working on your plugin. I say, let “capitalism” run its course. If we have a good-enough search engine the plugin that is more popular will come first and people will look at that. If you want traffic to your plugin you will dodge that and change your name so that you aren’t the second search result.