{"id":382723,"date":"2026-10-18T23:06:51","date_gmt":"2026-10-18T23:06:51","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/supply-chain-guard\/"},"modified":"2026-10-18T23:06:37","modified_gmt":"2026-10-18T23:06:37","slug":"afb-update-watch","status":"publish","type":"plugin","link":"https:\/\/kn.wordpress.org\/plugins\/afb-update-watch\/","author":23106373,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"0.1.0","stable_tag":"0.1.0","tested":"7.1.3","requires":"6.2","requires_php":"7.4","requires_plugins":null,"header_name":"AFB Update Watch","header_author":"AFB Digital Solutions","header_description":"Warns you when a plugin from WordPress.org changes owner or is closed, holds its updates until you have checked it, and stops WooCommerce auto-updating past extensions that are not tested with the new version.","assets_banners_color":"514541","last_updated":"2026-10-18 23:06:37","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/afbdigitalsolutions.co.uk\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":72,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"0.1.0":{"tag":"0.1.0","author":"aaronfozzy","date":"2026-10-18 23:06:37","revision":3753695}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3753696,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3753696,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3753696,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3753696,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.1.0"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[37376,23893,600,2550,286],"plugin_category":[45,54],"plugin_contributors":[287427],"plugin_business_model":[],"class_list":["post-382723","plugin","type-plugin","status-publish","hentry","plugin_tags-auto-updates","plugin_tags-plugin-updates","plugin_tags-security","plugin_tags-updates","plugin_tags-woocommerce","plugin_category-ecommerce","plugin_category-security-and-spam-protection","plugin_contributors-aaronfozzy","plugin_committers-aaronfozzy"],"banners":{"banner":"https:\/\/ps.w.org\/afb-update-watch\/assets\/banner-772x250.png?rev=3753696","banner_2x":"https:\/\/ps.w.org\/afb-update-watch\/assets\/banner-1544x500.png?rev=3753696","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/afb-update-watch\/assets\/icon-128x128.png?rev=3753696","icon_2x":"https:\/\/ps.w.org\/afb-update-watch\/assets\/icon-256x256.png?rev=3753696","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>Plugins change hands. Most sales are harmless, but some buyers have pushed a malicious update to every site running the plugin they bought. WordPress.org does not tell you when a plugin you rely on gets a new owner, so the first you hear of it is often the hack.<\/p>\n\n<p>AFB Update Watch checks every plugin you have installed from WordPress.org once a day and:<\/p>\n\n<ul>\n<li><strong>Spots a change of owner.<\/strong> It records each plugin's author and committers on WordPress.org the first time it sees it, then tells you if they change.<\/li>\n<li><strong>Spots a closure.<\/strong> If a plugin is closed on WordPress.org, for a security issue or any other reason, you hear about it straight away rather than finding out it stopped getting updates.<\/li>\n<li><strong>Holds updates until you have checked.<\/strong> A flagged plugin's update is held back, from automatic updates, the Update button and bulk updates alike, until you press release.<\/li>\n<li><strong>Guards WooCommerce updates.<\/strong> WooCommerce no longer holds itself back when your extensions are not marked as tested with a new version. With the guard on, a new major or minor WooCommerce release is not auto-updated until every active extension says it is tested with it, and you can see exactly which extensions are holding it up. Patch releases always go through.<\/li>\n<li><strong>Emails you.<\/strong> Alerts go to the admin email, or an address you choose.<\/li>\n<\/ul>\n\n<p>Everything runs on your own site. The only outside call is to the public WordPress.org plugin API.<\/p>\n\n<p>Built by <a href=\"https:\/\/afbdigitalsolutions.co.uk\/\">AFB Digital Solutions<\/a>, a UK WordPress and WooCommerce developer.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Install and activate the plugin. On multisite, network activate it.<\/li>\n<li>Go to Tools, AFB Update Watch (Network Admin, Plugins, AFB Update Watch on multisite) and press Check now to take the first baseline. Otherwise it runs on its own within a minute.<\/li>\n<li>Optionally set the alert email address.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20an%20owner%20change%20mean%20the%20plugin%20is%20malicious%3F\"><h3>Does an owner change mean the plugin is malicious?<\/h3><\/dt>\n<dd><p>No. Most ownership changes are perfectly ordinary. It means the people who can push updates to your site have changed, so it is worth reading the changelog and the support forum before you update.<\/p><\/dd>\n<dt id=\"which%20plugins%20are%20checked%3F\"><h3>Which plugins are checked?<\/h3><\/dt>\n<dd><p>Plugins installed from WordPress.org. Premium plugins and custom code are not on WordPress.org, so there is nothing to compare against.<\/p><\/dd>\n<dt id=\"will%20it%20stop%20security%20updates%3F\"><h3>Will it stop security updates?<\/h3><\/dt>\n<dd><p>Only for a plugin you have been warned about, and only until you release the hold. Release it as soon as you are satisfied.<\/p><\/dd>\n<dt id=\"what%20does%20it%20send%20to%20other%20servers%3F\"><h3>What does it send to other servers?<\/h3><\/dt>\n<dd><p>It asks the public WordPress.org plugin API about each installed plugin's slug. Nothing about your site, users or content is sent.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>0.1.0<\/h4>\n\n<ul>\n<li>First release: ownership and closure watch, update holds, WooCommerce untested-extension guard, email alerts.<\/li>\n<\/ul>","raw_excerpt":"Know when a plugin changes owner or is closed on WordPress.org, and hold its updates until you have checked it.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/382723","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=382723"}],"author":[{"embeddable":true,"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/aaronfozzy"}],"wp:attachment":[{"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=382723"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=382723"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=382723"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=382723"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=382723"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/kn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=382723"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}