Eric Mann

DGXPCO (Digital Guarantees for eXplicitly Permitted Core Operations) is a proof-of-concept cryptographic signature verification utility for WordPress software updates. The plugin will source manual (offline) signatures for WordPress core updates and prevent the application from updating unless the contents of the update payload are verified with a remote signature.
This provides a second source of truth for the integrity of WordPress updates beyond the MD5 content hash supplied in the header from the WordPress update server. If that server were ever breached, it’s unlikely the server hosting the signatures of the files was also breached. If the signatures ever fail to validate, you can know your site was protected from an attack.

DGXPCO

Andy Fragen

Raruto

Places development notice for plugins or themes that are in local development. Notices are placed on the plugins page and the themes page. Prevents updating of selected plugins and themes.
<ul>
<li>Automatically adds plugins and themes under version control.</li>
<li>Automatically allows for using a local file server.</li>
<li>Allows for bypassing the WordPress 5.2 WSOD Shutdown Handler.</li>
<li>Add a warning color to admin bar when running under localhost. Default is on.</li>
<li>Add a git host icon to the plugins page. Default is off. No option if GitHub Updater is running.</li>
<li>Allows setting of <code>WP_ENVIRONMENT_TYPE</code> in <code>wp-config.php</code>.</li>
</ul>
Pull Requests are welcome against the <a href="https://github.com/afragen/local-development" rel="nofollow ugc">develop branch on GitHub</a>.
Requires PHP 7.4 or greater.

Local Development

Works well, easy to use, customizable

Just what I was looking for!

Places development notice for plugins or themes that are in local development. Prevents updating of selected plugins and themes.

DGXPCO vs Local Development