WP Manifestindependent plugin directory
manifest / updates / aspireupdate

AspireUpdate WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

A plugin that allows for rewriting the URLs used to fetch updates from WordPress.org to some other endpoint

★ 48stars
581release downloads
≈20active sites
1.0.2latest · 1 year ago

Install

Download aspireupdate.zip From the 1.0.2 release on GitHub, Jun 9, 2025

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/aspirepress/aspireupdate/releases/download/1.0.2/aspireupdate.zip
Updates itself. It ships its own updater (Update URI header), so new versions appear under Dashboard → Updates.

This plugin allows a WordPress user to automatically rewrite certain URLs and URL paths to a new URL. This is helpful because it allows for the rewriting of api.wordpress.org to some other repository that contains the plugins the user wants.

The plugin supports multiple rewrites, and also supports rewriting the URL paths of the requests on a per-host basis. This improves the capacity of the plugin to adequately support newer or different repositories.

Requirements

This plugin requires:

  • WordPress 5.3 or later
  • PHP 7.4 or later
  • The ability to upload files to your WordPress installation
  • The ability to modify your configuration in wp-config.php

Installation

To install this plugin, follow these steps:

  1. Download a copy of this plugin as a ZIP file from GitHub or the Releases section.
  2. Go to the WordPress Dashboard (/wp-admin) section and log in if necessary as an administrator.
  3. Go to the Plugins menu and click on "Add New Plugin".
  4. Click the button "Upload Plugin" and upload the plugin ZIP file.
  5. Activate the AspireUpdate plugin.
  6. Configure the plugin if necessary with the user interface.
  7. Test and enjoy!

Configuration

The plugin menu appears under the Settings main menu item.

The plugin can use the following configuration options in wp-config.php:

Configuration Parameter Description Default, if any
AP_ENABLE Enable API rewrite false
AP_API_KEY The API Key for AspireCloud (not currently enforced)
AP_HOST API domain name api.aspirecloud.net
AP_COMPATIBILITY Configure various compatibility measures. array( 'skip_rewriting_on_existing_response' => true )
AP_DEBUG Enable Debug Mode false
AP_DEBUG_TYPES an array of debug modes array('string', 'request', 'response')
AP_DISABLE_SSL Disabled SSL verification for local testing true
AP_REMOVE_UI Disables plugin settings user interface and branding, defaults to config parameters set in wp-config.php false
AP_BYPASS_CACHE Add a cache buster parameter to bypass cache for API calls false

To set AP_COMPATIBILITY use an array to define the constant:

// Works as of PHP 7
define('AP_COMPATIBILITY', array(
    'skip_rewriting_on_existing_response' => true
));

To set AP_DEBUG_TYPES use an array to define the constant:

// Works as of PHP 7
define('AP_DEBUG_TYPES', array(
    'string', 'request', 'response'
));

NOTE: Any AspirePress configuration parameters set in wp-config.php will override any plugin options set in the plugin user interface.

NOTE 2: Setting AP_REMOVE_UI to true removes the plugin user interface. This is intended to be used in situations where AspireUpdate is deployed in a pre-configured mode and end-user configuration is not expected nor allowed.

WP Playgrounds Support

The AspireUpdate current build ('main' branch) can be experimented with in the WP Playground environment.

The AspireUpdate stable build ('playground-ready' branch) can be tested with in the WP Playground environment.

Debug Logging

The AspireUpdate log file is located under /wp-content and named "debug-aspire-update.log".

License

This plugin is licensed under the GPLv2, as it is a WordPress plugin and that is the license required.

Contributing

Contributions are welcome. Here's a short to-do list:

  • Add support for more complex rewrites. Right now we only support simple string matching, but it would be nice to support pattern matching, too.
  • Add support for more complex debugging. Right now we only support outputting strings, but it would be nice to support more complex debugging.
  • Add support for verifying that the repository can be reached, and if not, reverting back to the original repository.
  • Add support for multiple repositories, in a priority order. This would allow for multiple fallbacks.
  • Add support for additional header management. Right now the plugin is designed to add a simple Authentication header, which is not always needed. Other repositories might have different authentication requirements.

Support

If you need help with this plugin, please file an issue explaining the following:

  • What you did
  • What you expected
  • What actually happened
  • Why you think this is wrong

Issues that are not filed with this information will be closed. We will do our best to assist, but we cannot guarantee a response.

Changelog

See CHANGES.md for a list of changes.

Releases

12 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
1.0.2 latest
Jun 9, 2025 1 year ago
aspireupdate.zip
252
Jun 9, 2025 1 year ago
aspireupdate.zip
5
1.0
Jun 4, 2025 1 year ago
aspireupdate.zip
228
May 31, 2025 1 year ago
aspireupdate.zip
16
Apr 17, 2025 1 year ago
aspireupdate.zip
12
Apr 8, 2025 1 year ago
aspireupdate.zip
23
Apr 3, 2025 1 year ago
aspireupdate-0.9.1.zip
15
0.9
Apr 3, 2025 1 year ago
aspireupdate-0.9.zip
4
Feb 24, 2025 1 year ago
aspireupdate-0.6.2.zip
26
Feb 12, 2025 1 year ago
tag only
—
0.6
Jan 31, 2025 1 year ago
tag only
—
0.5
Nov 5, 2024 1 year ago
tag only
—

Active-site estimate ≈20 comes from the median of recent superseded releases. Method.

A grade

Security

AspireUpdate 1.0.2 · audited by WP Registry

No security issues found.

Audited release
1.0.2
Findings
none
Worst severity
—
Content hash
d58faf29f5e912cfd31c7d56…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.