Weave Code
Weaver
Helps Laravel developers discover, compare, and choose open-source packages. See popularity, security, maintainers, and scores at a glance to make better decisions.
Feedback
Share your thoughts, report bugs, or suggest improvements.
Subject
Message

Wp Dev Lib Laravel Package

xwp/wp-dev-lib

XWP WP Dev Lib bundles development tools and configuration for WordPress plugins and themes, including coding standards, static analysis, testing, and CI helpers to streamline building and maintaining high-quality WordPress projects.

View on GitHub
Deep Wiki
Context7

Product Decisions This Supports

  • Tooling standardization across a WordPress plugin/theme portfolio. wp-dev-lib is a curated bundle of the checks a WP project needs before shipping: PHP_CodeSniffer rulesets aligned with WordPress Coding Standards, PHP syntax/version linting, i18n and readme validation, version-consistency checks, and WordPress.org SVN deploy scripts. Adopting or rejecting it is a portfolio-level decision about how every plugin in the estate is validated, not a per-product decision.
  • Build vs. buy (more accurately: build vs. borrow). It is MIT-licensed development-time code, not a runtime library. The real decision is whether to consume the scripts as a maintained dependency, vendor a copy into each repo, or reimplement the equivalent with modern tooling. Because the project is archived (last release 2020-10-16) and has zero Packagist dependents, the honest framing is "borrow and vendor," not "adopt and depend."
  • Roadmap and modernization sequencing. It functions as a ready-made inventory of what a legacy WP pipeline actually checks. That makes it a useful baseline for a "current state vs. target state" tooling roadmap — e.g., Travis CI + shell scripts → GitHub Actions + Composer-installed wp-coding-standards/wpcs + wp-env/wp-phpunit.
  • Deprecation and technical-debt triage. For any plugin still calling into these scripts, this is a flag in the risk register: unmaintained shell glue with no security patching and no guarantee of PHP 8.2/8.3 compatibility. That drives a concrete work item (migrate or freeze) rather than an abstract "we have old CI."
  • Release engineering for WordPress.org distribution. The deploy and version-verification scripts address a genuinely tedious, error-prone step (SVN asset/tag handling). If the org ships to wp.org, this is the highest-value piece to evaluate; if it ships commercially or via Composer, that value largely evaporates.
  • Explicitly not a factor in: runtime architecture, performance, hosting cost, or user-facing feature scope. It never ships to production. Do not let it appear on a product roadmap as a customer-facing dependency.

When to Consider This Package

Consider it when:

  • You are maintaining a fleet of legacy WordPress plugins/themes whose CI was built in the Travis CI era and you need a working, battle-tested baseline rather than a blank file.
  • You need a reference implementation of WP.org deployment (SVN tagging, asset sync) and version/i18n validation that you intend to copy into a modern pipeline.
  • You are running a tooling audit and want a checklist of the quality gates a mature WP project is expected to enforce.
  • Your team has limited CI/PHPCS experience and benefits from reading a complete, real configuration before writing their own.
  • You are comfortable forking or vendoring and assigning an owner; the archived status is acceptable because the code is a starting point, not a live dependency.

Look elsewhere when:

  • You are starting a new plugin or theme. Use Composer-installed wp-coding-standards/wpcs, wp-phpunit, wp-env, and a maintained GitHub Actions workflow. There is no reason to inherit a 2020-era shell-script pipeline.
  • You require maintenance guarantees, security patching, or support SLAs. The repository is archived; there is no upstream to escalate to.
  • You need verified PHP 8.2/8.3 support, Composer 2 behavior, or modern CI runners. Nothing here has been validated against current runtimes since 2020; assume breakage and budget for it.
  • You are working outside WordPress plugin/theme development. The value is entirely WP-specific.
  • Your deployment target is not WordPress.org SVN (e.g., private Composer packages, containerized hosting, managed platforms). The deploy tooling, which is a large share of the value, does not apply.
  • You are evaluating it as a library dependency with a version constraint. With zero dependents and an archived upstream, treating it as a semver-managed dependency is a governance anti-pattern.

How to Pitch It (Stakeholders)

For executives: This is a free, MIT-licensed set of developer tooling for our WordPress plugin/theme projects — it never touches production code and adds no runtime cost, license fee, or customer-facing risk. It bundles the quality checks and release scripts a WP team would otherwise have to write from scratch. The catch is that the project was archived in October 2020: no one maintains it, and it carries no adoption as a reusable library. Our recommendation is therefore not to adopt it as a dependency, but to selectively reuse its scripts as a reference — a low-effort way to accelerate our tooling modernization without creating a new maintenance liability. Cost to evaluate: days, not weeks; no procurement or legal review needed beyond the standard MIT check.

For engineering: Treat this as a source of well-worn configuration, not a package to require. Pull the PHPCS/WPCS ruleset, the version-consistency and i18n checks, and — if we publish to WordPress.org — the SVN deploy script. Port them into our GitHub Actions pipeline and pin the underlying tools (wp-coding-standards/wpcs, php-parallel-lint, wp-phpunit) directly so we control the update path. Expect the shell scripts to need adjustment for PHP 8.x and Composer 2, and expect to own them permanently once copied. Do not add a Composer dependency on an archived repository with no maintainer and no dependents; the short-term convenience is not worth the long-term ambiguity about who fixes it when it breaks.

Weaver

How can I help you explore Laravel packages today?

Conversation history is not saved when not logged in.
Prompt
Add packages to context
No packages found.
socialdept/tenant-domains
tautvydasr/blade-class-names
socialdept/color-scales
maherelgamil/controller
coleus/widgets
coleus/table
coleus/users
coleus/music
coleus/health
coleus/calendar
coleus/notes
coleus/support
coleus/settings
coleus/apps
seampact/laravel
emmyconceptng/laravel-ng-postcode
jjsquady/round-robin
skyraptor/chatter
edlugz/sasapay
abbasudo/artisan-route