Overview

wpm is an open source package manager for WordPress plugins and themes.

It's built in Go for performance and reliability, with a globally distributed registry powered by Cloudflare Workers for fast installs around the world.

wpm makes WordPress dependencies reproducible, shareable, and easy to manage.

Why wpm?

• Built for WordPress out of the box. No extra configuration required.
• Plugins, themes, and mu-plugins are first-class package types.
• Dependency resolution works automatically.
• Reproducible installs with wpm.lock.
• Built-in package integrity and supply chain security checks.
• Fast installs and reliable caching.
• Fully open source.

For the longer rationale, a concrete comparison with Composer, and the design choices behind wpm, see Why wpm.

Quick install

Linux and macOS

curl -fsSL https://wpm.so/install | bash

Windows (PowerShell)

irm https://wpm.so/install.ps1 | iex

For Docker, go install, source builds, and shell completions, see the installation guide.

After installation, verify that wpm is available on your system path:

wpm --version

First steps

Create a new project:

mkdir my-wp-project
cd my-wp-project

wpm init -y

Install dependencies:

wpm install akismet hello-dolly

wpm downloads the packages into wp-content/plugins/ and records the exact versions in wpm.lock.

Inspect the dependency tree:

wpm ls

Learn wpm

Fundamentals

Learn how the wpm ecosystem works.

Guides

Common workflows and real-world usage.

Reference

Community