WP Manifestindependent plugin directory

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/mbndev/custom-plugin/archive/refs/heads/master.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Vendor packages and autoload

This plugin uses Composer and loads vendor/autoload.php for:

  • yahnis-elsts/plugin-update-checker (PucFactory) – update checks from GitHub.

Adding or changing vendor packages

  1. Run composer require <package> or edit composer.json and run composer update.
  2. For packages that might be loaded by other plugins (e.g. PUC), keep the class_exists() guard before require_once ... vendor/autoload.php so only one autoload runs.

Linting (WordPress PHP standards)

  • Conditional lint (runs PHPCS only when plugin code has functions, methods, classes, or use statements): composer run lint
  • Unconditional lint: composer run lint:all or ./vendor/bin/phpcs
  • Auto-fix: composer run lint:fix or ./vendor/bin/phpcbf
  • Fix twice then lint (all-in-one): composer run lint:run

To block merges to any branch when lint fails, enable branch protection and require the Lint status check; see .github/BRANCH_PROTECTION.md.

Releases

10 releases.

Tag
Published
v1.0.10 latest
Apr 8, 2026 6mo ago
Apr 8, 2026 6mo ago
Mar 6, 2026 7mo ago
Mar 5, 2026 7mo ago
Mar 5, 2026 7mo ago
Mar 5, 2026 7mo ago
Mar 5, 2026 7mo ago
Mar 5, 2026 7mo ago
Mar 5, 2026 7mo ago
Mar 5, 2026 7mo ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A grade

Security

Custom Plugin 1.0.10 · audited by WP Registry

No security issues found.

Audited release
1.0.10
Findings
none
Worst severity
—
Content hash
41fc39b2bec8e7738829a5d2…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.