Tools for WordPress and open source developers
I maintain many tools, plugins, and resources for developers working with WordPress, open source, and software security.
Plugins
Query Monitor
Query Monitor is the developer tools panel for WordPress. It enables debugging of database queries, PHP errors, hooks and actions, block editor blocks, enqueued scripts and stylesheets, HTTP API calls, and much more. Used on over 200,000 WordPress sites.
WP Crontrol
WP Crontrol lets you view and control what’s happening in the WP-Cron system. Used on over 200,000 WordPress sites.
User Switching
User Switching allows you to quickly swap between user accounts in WordPress at the click of a button. You’ll be instantly logged out and logged in as your desired user. Used on over 200,000 WordPress sites.
Developer Libraries
Extended CPTs
Extended CPTs is a library which provides extended functionality to WordPress custom post types and taxonomies. This allows developers to quickly build post types and taxonomies without having to write the same code again and again.
Extended Template Parts
Extended Template Parts is a library which provides extended functionality to WordPress template parts, including template variables and caching.
Args
This library provides classes which represent some of the array-type parameters that are used in WordPress, for use at the point where you're constructing the arguments to pass into a WordPress function.
Developer Tools
WordPress Hooks Intellisense for VS Code
This powerful extension for VS Code provides intellisense and autocomplete for WordPress hooks, actions, and filters.
wp-compat extension for PHPStan
A PHPStan extension to help verify that your plugin or theme remains compatible with its minimum supported version of WordPress.
WordPress TypeScript Definitions
This package provides well-documented TypeScript definitions that describe the shape of WordPress core PHP objects such as WP_Error
, WP_Post
, and WP_User
, as well as objects in REST API responses.
WordPress JSON Schemas
This package provides well-documented JSON schemas that describe the shape of WordPress core PHP objects such as WP_Error
, WP_Post
, and WP_User
, as well as objects in REST API responses.
WordPress Hooks Generator
Generates a JSON representation of the WordPress actions and filters in your code. Can be used with WordPress plugins, themes, and core.
RAVE for WordPress
Reproduces WordPress builds and verifies that the official and unofficial packages haven't been tampered with.
Slurpetta
Slurps down the most popular plugins and themes from WordPress.org for local analysis.
WordPress.org Plugin Attestation for GitHub Actions
Add this action to your deployment workflow to generate an attestation for the build provenance of the plugin ZIP file on WordPress.org.
WP Extension Check
WP-CLI command which checks the existence of PHP extensions needed to run WordPress.
Resources
Awesome GitHub Actions Security
A curated list of awesome things related to securing your GitHub Actions workflows.
Documentation for wp_mail
This reference lists all of the situations where WordPress core sends an email, along with how to filter or disable each one.
WordPress Hooks Reference
All the actions and filters from WordPress core in machine-readable JSON format.