=== Korizo ===
Contributors: wpplugins2026
Tags: plugin health, plugin security, plugin performance, compatibility checker, site audit
Requires at least: 6.2
Tested up to: 6.9
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Get a health score (A+ to F) for every installed plugin. See which plugins are safe, risky, or should be replaced — in plain English.

== Description ==

**Korizo** gives every installed WordPress plugin a letter grade (A+ through F) based on five key health dimensions: maintenance, compatibility, security, performance, and popularity.

Think of it as a **credit score for your plugin stack**.

Install it, click "Scan Now," and immediately see:

* Which plugins are **healthy and well-maintained**
* Which plugins are **risky or abandoned**
* Which plugins have **known security vulnerabilities**
* Which plugins are **slowing down your site**
* Whether your plugins are **compatible with WordPress 6.9**

No developer jargon. Just clear answers and actionable recommendations.

= Key Features =

**Health Scores for Every Plugin**
Each active plugin gets a letter grade (A+ to F) based on five scored dimensions:

* **Maintenance** (25%) — When was it last updated? How often is it maintained?
* **Compatibility** (25%) — Has it been tested with your version of WordPress and PHP?
* **Security** (20%) — Are there known vulnerabilities?
* **Performance** (20%) — How much overhead does it add to your admin?
* **Popularity** (10%) — How many sites use it? What do users rate it?

**Overall Stack Health Score**
A single number (300–850) that summarizes the health of your entire plugin stack — like a credit score. Know at a glance whether your site is in good shape or at risk.

**Plain-English Risk Alerts**
No technical jargon. You see messages like:

* "Contact Form 7 hasn't been tested with WordPress 6.9. Update may cause issues."
* "Flavor Plugin hasn't been updated in 24 months. Consider replacing it."
* "Yoast SEO is well-maintained, compatible, and performing well."

**WordPress 6.9 Compatibility Check**
A dedicated section showing which plugins are safe to use with WordPress 6.9, which have known issues, and which need updates.

**Basic Performance Benchmarking**
Optional benchmarking measures which plugins add the most overhead to your admin pages.

= Pro Features =

**Plugin Alternatives Engine**
Get curated recommendations for better-scoring replacements when a plugin grades poorly. Covers 25+ plugins across 18 categories with score comparisons.

**Update Risk Assessment**
Before updating a plugin, see a risk score based on 6 factors: version jump size, changelog quality, release freshness, support sentiment, rating trend, and WordPress compatibility. Know whether to update now, wait, or proceed with caution.

**Deep Performance Analysis**
See exactly how many hooks, callbacks, and database queries each plugin registers. Identify the real performance bottlenecks — not just load time, but what each plugin is doing under the hood.

= Who Is This For? =

* **Site owners** who manage WordPress sites but aren't developers
* **Bloggers and solopreneurs** who want peace of mind about their plugin stack
* **Agencies** who need to quickly audit client sites
* **Freelance developers** who want to professionalize their maintenance reports

= How It Works =

1. Install and activate the plugin
2. Go to **Plugin Health** in your admin sidebar
3. Click **Scan Now**
4. Review health scores and act on flagged issues

Scans run automatically once daily to keep your dashboard up to date.

== Installation ==

1. Upload the `korizo` folder to `/wp-content/plugins/`.
2. Activate the plugin through the **Plugins** menu in WordPress.
3. Navigate to **Plugin Health** in your admin sidebar.
4. Click **Scan Now** to analyze your installed plugins.

== Frequently Asked Questions ==

= Does this plugin slow down my site? =

No. Scanning runs in the background via WP-Cron and all results are cached. The dashboard reads from cached data — zero performance impact during normal site operation.

= Does it work with plugins not hosted on WordPress.org? =

Premium and custom plugins will be detected but receive neutral scores (50/100) for dimensions that require WordPress.org API data. Security checks from our curated database still apply.

= What does the performance benchmark do? =

When enabled (off by default), it briefly deactivates and reactivates each plugin one at a time to measure load time impact. This runs in the background and your site continues to function normally.

= How is the stack score calculated? =

Each plugin is scored across five dimensions with weights (25%, 25%, 20%, 20%, 10%). These combine into a composite score (0–100). The stack score maps the average composite across all plugins to a 300–850 scale — similar to a credit score.

= Can I scan inactive plugins too? =

Yes. Go to **Plugin Health > Settings** and enable "Include Inactive Plugins."

= Is my data sent anywhere? =

All scoring happens locally. Plugin slugs are sent to the WordPress.org Plugins API to fetch metadata (last updated, ratings, installs, etc.). If you opt in to anonymous usage analytics on activation (via Freemius), basic site-environment data (WordPress version, PHP version, active theme) is shared with Freemius. No data is shared if you opt out.

== Screenshots ==

1. Main dashboard showing the overall stack health score and summary cards
2. Individual plugin detail view with score breakdown across all five dimensions
3. WordPress 6.9 compatibility section highlighting known issues and safe plugins
4. All Plugins table with grades, scores, top concerns, and alternative suggestions
5. Settings page for scan frequency, display format, and benchmarking

== External Services ==

This plugin connects to external services during normal operation:

= WordPress.org Plugins API =

When you run a scan, the plugin queries the WordPress.org Plugins API to retrieve publicly available metadata (version, ratings, active installs, last updated date, support threads) for each installed plugin. Only plugin slugs are sent; no personal or site data is transmitted.

* Service URL: https://api.wordpress.org/plugins/info/1.2/
* Terms of Use: https://wordpress.org/about/domains/
* Privacy Policy: https://wordpress.org/about/privacy/

= Freemius =

This plugin uses the Freemius SDK for optional license management and usage analytics. On activation, you are asked whether to opt in to anonymous usage tracking. If you opt out, no data is sent to Freemius. If you opt in, basic site environment data (WordPress version, PHP version, active theme) is shared.

* Service URL: https://wp.freemius.com
* Terms of Use: https://freemius.com/terms/
* Privacy Policy: https://freemius.com/privacy/

== Changelog ==

= 1.0.0 =
* Initial release
* Plugin health scoring across 5 dimensions (maintenance, compatibility, security, performance, popularity)
* Overall stack health score (300–850, credit-score style)
* WordPress 6.9 compatibility checker with known issues database
* Plain-English risk alerts with severity levels
* Optional performance benchmarking via WP-Cron
* Admin dashboard with gauge animation, grade badges, and color-coded plugin table
* Individual plugin detail views with score breakdowns
* Settings for scan frequency, display format, inactive plugins, and benchmark toggle
* Full multisite support
* Accessibility: ARIA roles, focus styles, screen reader support, reduced motion support
* Privacy: WordPress.org API queries only for plugin metadata, optional Freemius usage analytics

== Upgrade Notice ==

= 1.0.0 =
Initial release. Install to get health scores for all your plugins.
