About this plugin
Peak Publisher is one place for all your plugins, wherever they are hosted. org are published by dropping the plugin folder — Peak Publisher talks to SVN for you, builds the tag, sets the Stable tag and commits once. Plugins for clients, teams and products are self‑hosted: your WordPress site becomes their update server, and installed copies receive updates directly from you via a standard Update URI.
Both channels share one task‑focused admin UI: add plugins and releases via drag & drop, let every upload be validated, decide with one switch which release your sites receive, manage icons, banners, screenshots and the Live Preview, keep Tested up to current, and see installations, downloads and ratings in one list.
org or to your own update server — and every next release with a single drop.
KEY FEATURES
🚀 Clean admin UI with a guided “Add New Plugin” flow
org where your plugin stands (not submitted yet, approved, or already published — then it is imported with its releases and assets), for self‑hosted the headers and the bootstrap code to add.
☝️ Drag & drop a ZIP or simply the whole plugin folder
You can drop a ZIP file, but the easiest way is to drop the raw plugin folder or the folder’s contents — anywhere in Peak Publisher. It recognizes whether the drop is a new plugin or a new version of an existing one.
org without an SVN client
Peak Publisher reads trunk and the tags, creates the new tag as a copy of trunk or the previous tag plus what changed, updates trunk, writes the Stable tag and commits once — large plugins in seconds, not minutes. Every commit is recorded with its revision and links to its changeset on Trac.
✅ Automatic validation with a checklist that explains itself
txt — every finding is a line of the checklist with what it means and, where you have a choice, a decision to confirm.
🎯 The current release is a decision, not a status
On every upload a switch says whether the new version is what sites receive. “Make current release” promotes or rolls back any version later. org this is the Stable tag — written for you, never forgotten — and the current release cannot be deleted by accident.
org’s rules — on both channels
Icons, banners and screenshots with the right names, sizes and byte limits; screenshot captions come from the current release’s readme. org, your changes collect in a working copy and go up in one commit; changes made elsewhere are shown side by side instead of being overwritten.
▶️ Live Preview
org plugin with fields for landing page, theme and plugins — or as JSON — and test it in WordPress Playground before you commit. org has imported the file and whether the preview is public.
🧪 Tested up to per release
See which version was tested with which WordPress, raise it with one click, and let the next upload carry the highest known value. A status column in the plugin list shows what needs attention.
📈 Figures for both channels
Self‑hosted: unique installations of the last 24 hours and downloads per day. org: active installs, downloads and rating from the directory, refreshed daily — the download history is kept beyond the directory’s window.
git, node_modules)
To provide clean packages and reduce package size, Peak Publisher removes development files and operating system artifacts from your uploads using patterns that you can configure. (optional)
🔐 Optional restriction via IP, CIDR or domain whitelist
Self‑hosted packages are stored in a private, server‑protected directory with no direct web access. By default the API is reachable from anywhere; with a whitelist of IP addresses, CIDR ranges or domain names you restrict access to update metadata and downloads.
org credentials
The SVN password is stored encrypted (AES‑256‑GCM) with a key outside the database — see the FAQ.
Some More Features
org plugin.
🧭 Standalone mode: Turn a dedicated site into a pure update server — frontend and unneeded admin menus off, with a redirect URL of your choice.
org every commit with its account and revision.
HOW IT WORKS
Self‑hosted
- Install Peak Publisher
on a dedicated WordPress site (recommended)
or any site you control.
- Follow the “Add New Plugin” flow
choose Self‑hosted, then add the Update URI header and the bootstrap code to your plugin.
- Upload your plugin
drag & drop the zipped plugin or the plugin folder.
- Read the checklist
Peak Publisher validates your upload and shows you the result.
- Click “Add new plugin”
to finish the process.
- Drop your next release with an increased version number
once you have one ready — the switch “Set as current” decides whether sites receive it.
wordpress.org
- Connect your wordpress.org account
org with your username and SVN password.
- Follow the “Add New Plugin” flow
org and say where your plugin stands: not submitted yet (the flow takes you to the submission page), approved but nothing published yet, or already published.
- Import or upload
a published plugin is imported with its releases, assets and figures; an approved one is published with its first upload.
- Drop your next release
Peak Publisher creates the tag, updates trunk, writes the Stable tag and commits once.
- Manage the rest in the editor
assets and the Live Preview, Tested up to, “Make current release” — each a commit under your account.
WHO IS IT FOR?
- Plugin developers who publish on wordpress.org and want to leave the SVN client behind
- Agencies that deliver custom plugins to multiple clients
- Product teams with private/proprietary extensions
- Anyone with plugins on both sides who wants them in one list
External services
org plugin — for exactly those plugins, and only then. org plugins in Peak Publisher, it contacts no external service, with the one exception of embedded videos named below. Client sites of your self‑hosted plugins talk to your Peak Publisher site only.
wordpress.org
Operated by the WordPress Foundation and Automattic. org/plugins/wordpress-org/detailed-plugin-guidelines/
When your server contacts it:
- api.wordpress.org — the plugin directory’s info API, to notice changes made elsewhere and to fetch the figures of your wordpress.org plugins: every 5 minutes while someone looks at the plugin list, during import, and for the Live Preview the listings of other plugins and themes; the download statistics once a day.
- plugins.svn.wordpress.org — the plugin repository. Reads without credentials during import and whenever the directory shows that something changed. Writes with your username and SVN password: publishing a release, “Make current release”, deleting a release, committing assets and the Live Preview, setting Tested up to.
- wordpress.org — the plugin page, to check whether the Live Preview is public, when you look at the Live Preview; and the profile avatar lookup when you connect, edit or test the account.
- core.svn.wordpress.org — the default theme of the current WordPress branch, once per branch, when you look at a Live Preview.
org, over HTTPS — its SVN password, and your server’s IP address. Every request identifies itself as “PeakPublisher/{version}”; your site’s address is never part of a request.
com/privacy/). These servers see your browser’s IP address and, as referrer, your site’s domain. org.
Embedded videos in a readme
tv, Vine, SoundCloud, Instagram, Mixcloud, Cloudup) and without any account. The provider sees your server’s IP address and the video URL. Change the list with the filter pblsh_readme_oembed_providers.
Privacy
Peak Publisher does not track users and sends no telemetry. org, for the plugins you keep there, as described under “External services”. For self‑hosted plugins, all communication happens between the client sites and your Peak Publisher site.
About the client sites of a self‑hosted plugin, Peak Publisher stores two things: the installation count keeps, per site, a salted and non‑reversible hash of its home URL, the installed version and when it was last seen — for 24 hours, and only while the count is switched on under Settings → Self‑hosted; the download count keeps one number per day. All files are stored on your server in a protected directory.