Changelog
v1.0.0 (2026-05-24)
Initial public release.
- First WordPress.org plugin directory submission under the slug
steadyscore. - Local scoring engine — six weighted factors (maintenance, security history, support, compatibility, install base, author reputation) producing a 0–100 score and a Trusted / Acceptable / Caution / Warning / Critical / N/A tier per plugin.
- Five scoring paths — WordPress.org (Path 1), premium-to-free proxy mapping (Path 2), CodeCanyon enrichment (Path 3, Pro), SteadyPress data service enrichment (Path 4, Pro), and source-code analysis for custom plugins (Path 5, Pro).
- Dashboard with sortable / filterable table, configurable visible columns, drag-to-reorder columns, and CSV export.
- Detail slide-over with per-factor breakdown, vulnerability list, plugin metadata, and (Pro) AI recommendation.
- Optional Wordfence Intelligence vulnerability lookups using a user-supplied Wordfence API key — no requests until a key is saved.
- Action Scheduler integration for chunked, polite background work (initial population, background refresh, author-reputation recalculation, pruning).
- REST API under
/wp-json/steadyscore/v1/— settings, license, status polling, data deletion, and the Pro endpoints for AI analysis, monitoring settings, and Google Sheets export. - Six custom database tables created via
dbDeltawith full uninstall cleanup. - Bundled in-admin user manual at SteadyScore → Help.
- Self-hosted Plus Jakarta Sans, Source Sans 3, and JetBrains Mono fonts — no requests to Google Fonts or any third-party CDN.
- Renamed during the submission cycle from PluginScore to SteadyScore because the WordPress.org automated naming check rejects "plugin" as a substring in plugin names. The internal prefix, namespace, options, hooks, tables, and translation files all moved to the new name in a single coordinated release.
- Pro tier: HMAC-SHA256 signed requests to the SteadyPress API and EDD Software Licensing-based activation with idempotent re-activation handling. AI analysis is delivered through the SteadyPress-managed provider and is included in every Pro subscription.
Compatibility
- Tested on WordPress 6.5 through 6.9.
- Requires PHP 8.0 or newer.
- Tested clean against the official WordPress Plugin Check 1.9.0 — zero errors, zero trademark warnings; the 117
WordPress.DB.PreparedSQLwarnings are expected and benign (see Troubleshooting for the explanation).
Known limitations at launch
- No "refresh now" button in the admin. Refresh is driven by cache TTLs and lifecycle events; to force a re-run, deactivate and reactivate the plugin.
Need more help? Contact support.