ja1me4

<p><strong>Nahnu Asset Scanner</strong> manually scans the pages you choose and builds a complete inventory of everything loaded on your site’s front end. Instead of guessing which scripts to defer or which cookies need a consent banner, you get a precise, plugin-attributed list to work from.</p>
<h3>What it scans</h3>
<ul>
<li><strong>JavaScript</strong> — every script, inline or external, with file path, size, whether it’s first- or third-party, and which plugin or theme registered it</li>
<li><strong>CSS</strong> — every stylesheet with the same attribution detail</li>
<li><strong>Cookies</strong> — every cookie set during page load, categorized as Necessary / Preferences / Analytics / Marketing, with the plugin that sets it identified from a bundled database of 600+ known cookie patterns covering 400+ plugins</li>
<li><strong>Domains</strong> — every third-party domain contacted, identified by category using the bundled vendor map</li>
</ul>
<h3>Why it matters</h3>
<p><strong>Cache configuration</strong> — cache plugins need to know which cookies bypass the cache (WooCommerce cart, WPML language, login cookies) and which JS/CSS files to exclude from minification or combination. This plugin gives you those exact file paths and cookie names from a real scan of your site, not a generic list.</p>
<p><strong>Cookie consent</strong> — before configuring Complianz, CookieYes, or Real Cookie Banner, run a scan to get an accurate, categorized cookie inventory. The bundled database covers WooCommerce, membership plugins, LMS platforms, builders, security plugins, analytics services, ad networks, chat widgets, and more.</p>
<p><strong>Performance auditing</strong> — identify render-blocking scripts, bloated third-party embeds, and unnecessary tracking pixels. The JS and CSS tabs show inline vs. external, first-party vs. third-party, and file size at a glance.</p>
<p><strong>Third-party auditing</strong> — the Domains tab reveals every external service your site contacts. Use it as the starting point for a Content Security Policy or to assess your GDPR third-party processor list.</p>
<h3>Cookie database</h3>
<p>The plugin ships with a bundled cookie database covering 600+ patterns from 400+ WordPress plugins and services. No external requests are made — everything is included in the plugin:</p>
<ul>
<li><strong>WooCommerce ecosystem</strong> — WooCommerce, YITH plugins, CartFlows, FunnelKit, Dokan, and payment gateways (Stripe, PayPal, Klarna, Mollie, Braintree)</li>
<li><strong>Membership & LMS</strong> — MemberPress, Paid Memberships Pro, Restrict Content Pro, s2Member, WishList Member, LearnDash, LifterLMS, Tutor LMS, Sensei, Masteriyo, LearnPress</li>
<li><strong>Community</strong> — BuddyPress, BuddyBoss, bbPress, PeepSo, wpForo</li>
<li><strong>Page builders</strong> — Elementor, Divi, Beaver Builder, Brizy, Bricks, Oxygen, WPBakery</li>
<li><strong>Security</strong> — Wordfence, Solid Security (iThemes), Sucuri, Shield Security, WP Cerber, CleanTalk, MalCare</li>
<li><strong>Caching</strong> — WP Rocket, LiteSpeed Cache, W3 Total Cache, WP Fastest Cache, WP Optimize, SiteGround Optimizer, Hummingbird, Swift Performance</li>
<li><strong>Analytics</strong> — Google Analytics (UA + GA4), Hotjar, Matomo, Heap, Lucky Orange, FullStory, Mouseflow, Inspectlet, VWO, Optimizely, Microsoft Clarity</li>
<li><strong>Advertising</strong> — Meta Pixel, Google Ads, Microsoft Ads, TikTok, LinkedIn, Pinterest, Google DoubleClick, Taboola, Outbrain, Criteo, The Trade Desk, Marketo, Oracle Eloqua, Salesforce Pardot</li>
<li><strong>Live chat</strong> — Tawk.to, LiveChat, Tidio, Crisp, Zendesk, Freshchat, Intercom, Drift, Olark, HubSpot</li>
<li><strong>Consent platforms</strong> — CookieYes, Complianz, Borlabs Cookie, Real Cookie Banner, Cookiebot, OneTrust, Osano, Cookie Notice</li>
<li><strong>Email marketing</strong> — Klaviyo, Brevo, Omnisend, ActiveCampaign, ConvertKit, Drip, MailPoet, Mailster, MC4WP</li>
<li><strong>Accessibility</strong> — accessiBe, UserWay, EqualWeb, AudioEye</li>
</ul>
<h3>Key features</h3>
<ul>
<li>Manual scan — you choose which pages to scan (up to 10 per run)</li>
<li>No external requests — everything runs on your server with bundled data</li>
<li>Plugin attribution — JS, CSS, and cookies are matched to the plugin that registered/sets them</li>
<li>CSV export on every tab</li>
<li>Fully self-contained — no account, no API key, no internet connection required</li>
</ul>
<h4>Privacy</h4>
<p>Nahnu Asset Scanner makes no external HTTP requests of any kind. All scans run entirely on your server. All cookie identification data is bundled within the plugin. No data about your site or visitors is ever sent anywhere.</p>


Nahnu Asset Scanner

Scan your site's front end to inventory every JS file, CSS file, cookie, and external domain — the foundation for accurate cache configuration an …

Dominik Schilling

benlumley

<p>Filename based cache busting for WordPress scripts/styles using last modified date.</p>
<p>Stop telling clients or users to hard refresh / shift refresh. The url to all of the css/js files on your site will change automatically whenever the files are modified. You can set proper long cache lifetimes to help get top scores on Google Pagespeed without running into cached css/javascript problems.</p>
<p>Based on this gist https://gist.github.com/ocean90/1966227 from Dominik Schilling, I’ve enhanced it by automatically replacing the asset version with the files modification time and automatically editing htaccess – making it install + forget.</p>
<p>Includes querystring option as a fallback – which works in more scenarios.</p>
<h3>Webservers</h3>
<h4>Apache</h4>
<p>The plugin should add what it needs to your .htaccess file jsut like WP itself. But if for any reason that doesn’t work for you – here’s what it adds:</p>
<pre><code># FBACB
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteBase /

  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteRule ^(.+)\.([0-9\.]+)\.(js|css)$ $1.$3 [L]
</IfModule>

# still fbacb
<IfModule mod_expires.c>
    ExpiresActive on
    ExpiresByType text/css                            "access plus 1 year"
    ExpiresByType application/javascript              "access plus 1 year"
</IfModule>
# END FBACB
</code></pre>
<h4>NGINX</h4>
<pre><code> location ~* ^(.+)\.(?:\d+)\.(min.js|min.css|js|css)($|\?.*$) {
   try_files $uri $1.$2;
 }
</code></pre>
<h3>Host specific notes</h3>
<p>Some webhosts need a bit of custom config to get the filename based urls working.</p>
<h4>WP Engine</h4>
<p>To work on WP-Engine, you’ll need the following redirect added via my.wpengine -> installname -> Redirect rules</p>
<pre><code> Source: ^(.+)\.([0-9\.]+)\.(js|css)$
 Dest: $1.$3
 Type: break (this is under advanced)
</code></pre>
<h4>CloudWays</h4>
<p>Just works.</p>
<h4>Flywheel</h4>
<p>Just works.</p>
<h4>PHP Fallback</h4>
<p>If your webserver is failing to serve assets using url rewriting, the plugin attempts to serve them itsef (ie: via PHP). Obviously this is slow/less than ideal in production (it’ll be much slower) – so you should configure your web server correctly to serve the files. If you see this HTTP header “FBACB-Php-Fallback: yes” on your assets, this applies to you.</p>
<p>Note that hosts are increasingly configured to serve css/js directly from disk and won’t fall back to PHP + WordPress error handling – this fallback then won’t work.</p>


Filename based asset cache busting

Filename based cache busting for WordPress scripts/styles using last modified date.

Nahnu Asset Scanner vs Filename based asset cache busting