WPZylos Framework
Modern WordPress plugin framework with isolation, DI, and security-first design.
Quick Start
# Create a new plugin
composer create-project wpzylos/scaffold my-plugin
cd my-plugin
# Activate
wp plugin activate my-plugin
Package Documentation
| Package | Description |
|---|---|
| Core | Application kernel, PluginContext, ServiceProvider |
| Container | PSR-11 dependency injection |
| Config | Configuration repository |
| Hooks | WordPress hook management |
| HTTP | Request/Response abstraction |
| Routing | Admin, AJAX, and REST routing |
| Views | Template rendering (PHP + Twig) |
| I18n | Internationalization |
| Validation | Input validation with 26 rules |
| Security | Nonces, capabilities, sanitization |
| Events | Event dispatcher with subscribers |
| Logger | PSR-3 compatible logging |
| Database | Query builder, connections |
| Migrations | Database migrations with rollback |
| Model | ORM with relationships & soft deletes |
| Queue | Background job processing via WP-Cron |
| Mailable class with fluent API | |
| Notification | Multi-channel notifications |
| Scheduler | Task scheduling with frequency DSL |
| Assets | Script/Style manager with Vite support |
| Requirements | Pre-flight system checks |
| CLI Core | Command foundation |
| CLI Devtool | 42 code generators (make:*) |
| WP-CLI | WP-CLI integration |
| Scaffold | Plugin scaffolding |
Guides
- Scaffold Walkthrough — Build a plugin step-by-step
- Troubleshooting — Ecosystem-wide issues
Design Principles
- Isolation — Multi-plugin support via PHP-Scoper
- No globals — Identity from PluginContext
- Security-first — Nonces, capabilities, prepared statements
- PSR compliance — Container (PSR-11), Logger (PSR-3), Events (PSR-14)