WordPress Packagist
libgossamer
Our great sponsors
| WordPress Packagist | libgossamer | |
|---|---|---|
| 7 | 13 | |
| 691 | 31 | |
| 0.9% | - | |
| 6.8 | 2.6 | |
| about 1 month ago | over 2 years ago | |
| PHP | PHP | |
| MIT License | ISC License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
WordPress Packagist
-
How do you create WordPress websites for your clients?
If I have to use WordPress for something, I'll build it as a standard PHP project, requiring WordPress and any themes/plugins as a Composer dependencies from johnpbloch/wordpress and WordPress Packagist (more info here). If I need to do any significant templating, I like to use Timber.
- Fullstack but new to WP - Searching for answers
-
Is there a package.json equivalent but for plugins?
Use it together with https://wpackagist.org/ and you can update all plugins/themes by latest or by version number.
-
How to use Git for Wordpress sites?
Another option you can look at is Bedrock by Roots - that is sets WP as an app with composer already set up. It allows you to install WP plugins (from official WP repo) via composer (WP Packagist). The structure is set up to allow for git workflow. Also helpful if you want to make use of a bunch of composer packages on your site.
-
Looking for advice: installing plugin from GitHub on many sites for upgrade
https://wpackagist.org/ in the example you see "repositories", now in that array you can put your plugins github-link and set the other settings. with composer install you install them and with composer update you update them
- Backdoor in several WP Themes and Plugins from AccessPress
-
How should I update plugins in a Git-based workflow with Staging and Production environments?
Side question: I know that the WordPress ecosystem has been moving toward better support for Composer – e.g., with WPackagist. But wouldn't plugins installed/updated via Composer run into the same issue?
libgossamer
-
Gossamer: Supply Chain Security for Open-Source Software
See the definition of AppendKey:
-
Backdoor in several WP Themes and Plugins from AccessPress
That's why Gossamer exists, though. (I would talk about it more on here, but I figured everyone's still sick of hearing about it.) :)
- Gossamer: Supply Chain Security for the PHP Ecosystem.
- GnuPG used to ask for your support to help protect online privacy
-
Composer Security Hardening
Anyway, Github is still online -- https://github.com/paragonie/libgossamer
-
I am Filippo Valsorda, Go cryptography lead and tool author, Ask Me Anything
More recently, I wrote a blog post about end-to-end encryption, and mentioned integrating with some sort of decentralized authority-free identity system like Gossamer.
What are some alternatives?
Packagist - Package Repository Website - try https://packagist.com if you need your own -
Composer - Dependency Manager for PHP
Repman - Repman - PHP Repository Manager: packagist proxy and host for private packages
zenbot-sim-runner - A sim run batch aggregator / automator for Zenbot. Eases the process of backtesting and subsequent analysis of results.
Spout - Read and write spreadsheet files (CSV, XLSX and ODS), in a fast and scalable way
PGPy - Pretty Good Privacy for Python
Phpactor - Mainly a PHP Language Server with more features than you can shake a stick at
advanced-custom-fields-pro - Advanced Custom Fields Pro, Git-ified. Automatically synced via GitHub Actions! This repository is just a mirror of the Advanced Custom Fields Pro plugin. Please do not send pull requests and issues.
Laminas API Tool Skeleton - Skeleton Application for Laminas API Tools
trillian - A transparent, highly scalable and cryptographically verifiable data store.
Rector - Instant Upgrades and Automated Refactoring of any PHP 5.3+ code
tierney - Generic library for structured commands with explicit parallelism