Skip to content

Tools for WordPress and open source developers

I maintain many tools, plugins, and resources for developers working with WordPress, open source, and software security.

Plugins

Query Monitor

Query Monitor is the developer tools panel for WordPress. It enables debugging of database queries, PHP errors, hooks and actions, block editor blocks, enqueued scripts and stylesheets, HTTP API calls, and much more. Used on over 200,000 WordPress sites.

WP Crontrol

WP Crontrol lets you view and control what’s happening in the WP-Cron system. Used on over 200,000 WordPress sites.

User Switching

User Switching allows you to quickly swap between user accounts in WordPress at the click of a button. You’ll be instantly logged out and logged in as your desired user. Used on over 200,000 WordPress sites.

Developer Libraries

Extended CPTs

Extended CPTs is a library which provides extended functionality to WordPress custom post types and taxonomies. This allows developers to quickly build post types and taxonomies without having to write the same code again and again.

Extended Template Parts

Extended Template Parts is a library which provides extended functionality to WordPress template parts, including template variables and caching.

Args

This library provides classes which represent some of the array-type parameters that are used in WordPress, for use at the point where you're constructing the arguments to pass into a WordPress function.

Developer Tools

WordPress Hooks Intellisense for VS Code

This powerful extension for VS Code provides intellisense and autocomplete for WordPress hooks, actions, and filters.

wp-compat extension for PHPStan

A PHPStan extension to help verify that your plugin or theme remains compatible with its minimum supported version of WordPress.

WordPress TypeScript Definitions

This package provides well-documented TypeScript definitions that describe the shape of WordPress core PHP objects such as WP_Error, WP_Post, and WP_User, as well as objects in REST API responses.

WordPress JSON Schemas

This package provides well-documented JSON schemas that describe the shape of WordPress core PHP objects such as WP_Error, WP_Post, and WP_User, as well as objects in REST API responses.

WordPress Hooks Generator

Generates a JSON representation of the WordPress actions and filters in your code. Can be used with WordPress plugins, themes, and core.

RAVE for WordPress

Reproduces WordPress builds and verifies that the official and unofficial packages haven't been tampered with.

Slurpetta

Slurps down the most popular plugins and themes from WordPress.org for local analysis.

WordPress.org Plugin Attestation for GitHub Actions

Add this action to your deployment workflow to generate an attestation for the build provenance of the plugin ZIP file on WordPress.org.

WP Extension Check

WP-CLI command which checks the existence of PHP extensions needed to run WordPress.

Resources

Awesome GitHub Actions Security

A curated list of awesome things related to securing your GitHub Actions workflows.

Documentation for wp_mail

This reference lists all of the situations where WordPress core sends an email, along with how to filter or disable each one.

WordPress Hooks Reference

All the actions and filters from WordPress core in machine-readable JSON format.