=== NEWTIV Extension Watch ===
Contributors: newtiv
Tags: security, plugins, abandoned, closed plugins, vulnerability
Requires at least: 6.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Warns you when an installed plugin or theme is closed on WordPress.org, abandoned, or not tested with your WordPress version.

== Description ==

WordPress.org closes plugins every day: security issues, guideline violations, authors who left. A closed plugin never receives another update, yet WordPress does not tell the sites that still run it. It stays installed and active, with its flaw.

NEWTIV Extension Watch checks, once a day, every plugin and theme installed on your site against the public WordPress.org directory, and tells you clearly what needs attention:

* **Critical**: closed on WordPress.org for a security issue. Deactivate it and replace it.
* **High**: closed for another reason. It no longer receives updates.
* **Medium**: no update for 2 years (configurable): probably abandoned.
* **Low**: not tested with the last two versions of WordPress.

Plugins and themes that are not hosted on WordPress.org (premium or custom) are listed separately, since their updates cannot be checked here.

**Where you see it**

* A notice right under the plugin, in the Plugins screen, like WordPress update notices.
* An Extension Watch box on the dashboard.
* A full report in Plugins → Extension Watch, with a « Find a replacement » link for each problem.
* An email, only when a new problem appears (recipients of your choice).

You can ignore an item you knowingly keep; it comes back automatically if its situation gets worse. Works on multisite (network admin).

== External services ==

This plugin uses the public WordPress.org API (https://api.wordpress.org), operated by the WordPress Foundation, to read the status of each installed plugin and theme: once a day, and when you click « Check now ». Only the slug (directory name) of each installed plugin and theme is sent, with the WordPress version in the user agent. No personal data and no site address are sent.

WordPress.org terms and privacy policy: https://wordpress.org/about/privacy/

== Installation ==

1. Install and activate the plugin.
2. The first check runs a few seconds later. Open Plugins → Extension Watch, or click « Check now ».
3. Optional: choose who receives the email alerts.

== Frequently Asked Questions ==

= Does it slow down my site? =

No. The check runs in the background once a day (WP-Cron) and only in the administration. Visitors are never affected.

= A plugin I bought is « not checked ». Is that a problem? =

No. It is simply not hosted on WordPress.org, so its status cannot be read there. Make sure its author still updates it.

= Can it remove plugins for me? =

No. It only warns you. You decide what to deactivate or replace.

== Changelog ==

= 1.0.0 =
* First release: daily check of plugins and themes against WordPress.org (closed, abandoned, untested), notices in the Plugins screen, dashboard box, report page, email alerts, ignore list.
