Plugin Check (PCP) vs Toolbelt

Plugin Check is a tool for testing whether your plugin meets the required standards for the WordPress.org plugin directory. With this plugin you will be able to run most of the checks used for new submissions, and check if your plugin meets the requirements. Additionally, the tool flags violations or concerns around plugin development best practices, from basic requirements like correct usage of internationalization functions to accessibility, performance, and security best practices. The checks can be run either using the WP Admin user interface or WP-CLI: To check a plugin using WP Admin, please navigate to the Tools > Plugin Check menu. You need to be able to manage plugins on your site in order to access that screen. To check a plugin using WP-CLI, please use the wp plugin check command. For example, to check the “Hello Dolly” plugin: wp plugin check hello.php Note that by default when using WP-CLI, only static checks can be executed. In order to also include runtime checks, a workaround is currently necessary using the --require argument of WP-CLI, to manually load the cli.php file within the plugin checker directory before WordPress is loaded. For example: wp plugin check hello.php --require=./wp-content/plugins/plugin-check/cli.php You could use arbitrary path or URL to check a plugin. For example, to check a plugin from a URL: wp plugin check https://example.com/plugin.zip or to check a plugin from a path: wp plugin check /path/to/plugin The checks are grouped into several categories, so that you can customize which kinds of checks you would like to run on a plugin. Keep in mind that this plugin is not a replacement for the manual review process, but it will help you speed up the process of getting your plugin approved for the WordPress.org plugin repository, and it will also help you avoid some common mistakes. Even if you do not intend to host your plugin in the WordPress.org directory, you are encouraged to use Plugin Check so that your plugin follows the base requirements and best practices for WordPress plugins. Plugin Namer Tool Plugin Check now includes an AI-powered Plugin Namer tool (accessible via Tools > Plugin Check Namer) that helps plugin authors evaluate plugin names before submission. This tool checks for: Similarity to existing plugins in the WordPress.org directory Potential trademark conflicts with well-known brands Compliance with WordPress plugin naming guidelines Generic or overly broad naming issues The Plugin Namer provides instant feedback with actionable suggestions, helping you choose a clear, unique, and policy-compliant name that stands out in the plugin directory. This feature requires WordPress 7.0+ and configured AI connectors. Important: The Plugin Namer tool provides guidance only and is not definitive. All plugin name decisions are subject to final review and approval by the WordPress.org Plugins team reviewers. SVN Checker Tool Plugin Check also includes an SVN Checker tool (accessible via Tools > Plugin Check SVN) that scans a plugin’s WordPress.org SVN repository for unexpected files, folders, and zip archives. This helps plugin authors and reviewers ensure that only the intended files are present in the plugin’s trunk, tags, and assets directories before or after a release. Checks reviewed by AI When AI analysis is enabled, Plugin Check can review selected results to help identify likely false positives. Related issues are grouped and analyzed with prompts tailored to the type of check, using the surrounding code as context. The AI review does not remove or change the original results, but adds an additional summary that highlights which findings may need human review before taking action.

A collection of simple addons that provide every day functionality with privacy and speed. There’s very few options, and no unnecessary filler. It does exactly what it needs to do and nothing else. Toolbelt takes a privacy first approach to adding features. Everything happens on your server. No data is sent to third party servers without your explicit consent. No data is loaded from third parties (for example social sharing scripts). Taking inspiration from Jetpack I want to rebuild the features I use the most and make them as simple and fast as possible. Toolbelt has been featured on The WordPress Tavern in an interview with me. You can read more about the creation of the plugin and my desire for a more private internet. Gutenberg Blocks Some of the Toolbelt modules include blocks to make working with the generated content easier. The available blocks are: Contact Form – The simplest way to have people get in touch. Works with the spam module. Post Categories – A category content list for magazine and newspaper themes. Simple Slider – A fast, CSS powered slider. No JavaScript and easy to edit. Projects Grid – to list a collection of projects. These can be filtered by project category. Testimonials Grid – to list a group of testimonials. Great for showing off! 🙂 Markdown – for those who like a simpler writing experience. Sitemap – Easily list all posts, pages, Categories and Projects. Star Rating – Rate things with a simple visual interface. Breadcrumbs – for full site editing. Related posts – for full site editing. All Features Toolbelt has a lot of features. The complete list is below. Admin Interface Tweaks – Small CSS changes to make the interface nicer to use. Avatars – Algorithmicly generated private avatars that are consistent across websites. Breadcrumbs Contact Form – Gutenberg compatible & private. Supports the spam blocker module. Cookie Banner CSP Header Disable Comment Urls – Removes comments urls from your site. Disable REST API – Disable the REST API from public usage. Fast 404 – Stops WordPress from loading the full 404 page for images and other content. Reduces server usage. Footnotes Get Image – Find a featured image for posts that do not have one assigned. Heading Anchors – Add anchor names to headings so that they can be linked to. Iframe Privacy Shield – Remove iframes and add a clickable screen so that they load when the user wants to see them. Infinite Scroll Jetpack Dev Mode – Disable Jetpacks connection so that only local functions are enabled. Lazy Loading Layout Grid – A nicer columns block. Markdown Monetization – Enable Coil Web Monetization. OEmbed – Add additional OEmbed providers. Optimization – Remove WordPress features that are rarely used. Portfolio – Portfolio custom post type and blocks. Post Category – A post category block. Random Redirection – Randomly redirect to a blog post. Related Posts Remove IP Addresses – Remove IP addresses from comments for user privacy (spam protection still works). Responsive Videos Search Redirect – If there’s a single search result redirect to it instead of displaying the restuls. Sitemap – Sitemap block. Slider – JavaScript free CSS slider block. Social Menu – Replace social links with icons in navigation blocks. Spam Blocker – Privacy focused spam blocker. Static Social Sharing – Link to social sharing pages, and don’t load social network content on your site. Stats – Enable privacy focused analytics providers like Fathom. Testimonials – Testimonials Custom post types and blocks. Tidy Notifications – Move plugin and theme notifications to a sidebar. Typographic Widows – Remove widows in post titles. Widget Display – Set rules for widget visibility. Toolbelt is Private Every week there’s a new story about Facebook (or Google, or Amazon, or whoever) tracking people inappropriately, or selling user details. Or some security breach that leaks users passwords or credit card info. Privacy is a big topic and frankly, it’s scary how much big corporations like Google, Facebook, and Twitter know. To ensure Toolbelt is as privacy focused as possible it: Does not phone out. No data is shared with third parties. Does not use standard social sharing javascripts (loaded from social networks servers). Does not track your usage of the plugin. Does not add generator comments, or secret promotional comments to your site html. Toolbelt is Fast Slow websites make me sad. I don’t want to add anything to Toolbelt that will impact site load speed. My Google Pagespeed score should not move from 100. Why? Faster sites are shown to increase conversions and time on site. Google loves fast sites and improves their search rankings. In addition fast sites are great for people with slower internet access, or on mobile data, and use less resources to generate the page. So many benefits! To be fast Toolbelt: Doesn’t use jQuery or any other javascript framework. All javascript is vanilla js, and minified. Minifies all assets (JS and CSS). Loads all assets inline. They are already small, and loading them directly on the page means there are no server requests. Only loads things when they are needed. JS and CSS are only loaded for activated modules. Very few options. There’s one main database option, an array that stores what modules are active. And another that stores settings for some modules. Uses the minimum code possible. Minimum Javascript and PHP. Less code means more speed, and fewer bugs. All options are disabled by default. You enable only the ones you need. Built for developers Toolbelt is built with developers in mind. It has a collection of hooks and filters to enable you to make the modules work the way you want. If you’re intersted to jump in the project, there are opportunities for developers at all levels to help out. Contribute to Toolbelt on GitHub and join the party. 🎉 The code can be found on Github Documentation with code examples can be found on the wiki You can reach out to me with questions or problems on Twitter