Description
UpdaWa keeps track of pending updates for your WordPress installation and makes that information available in two ways:
- Admin dashboard – a dedicated UpdaWa menu item shows the current update status as a formatted JSON view or an HTML table (plugins, themes, WordPress core).
- REST API endpoint –
GET /wp-json/updawa/v1/statusreturns the same data as JSON, protected by a per-site Bearer token that you generate and manage from the admin panel.
Features
- One-click status refresh for plugins, themes, and WordPress core.
- JSON view with pretty-printed output.
- Table view with colour-coded update indicators.
- Secure, per-site API token (64-character hex string, cryptographically random).
- Token regeneration with a single click.
- QR code in the Token API tab encodes the site name, site URL, and token for easy mobile access.
- Zero external dependencies — the QR code library is bundled with the plugin.
REST API
The endpoint is read-only and requires a valid Bearer token:
`bash
curl -H “Authorization: Bearer YOUR_TOKEN” https://example.com/wp-json/updawa/v1/status
`
The response is a JSON object with keys generated_at, wordpress, plugins, and themes.
Installation
- Upload the
updawafolder to/wp-content/plugins/. - Activate the plugin through the Plugins screen in WordPress.
- Go to UpdaWa in the admin sidebar.
- Open the Token API tab to find or regenerate your API token.
FAQ
-
Does the plugin send any data to external servers?
-
No. All update checks use WordPress’s built-in functions (
wp_update_plugins,wp_update_themes,wp_version_check), which are the same calls WordPress itself makes. The bundled QR code library runs entirely in your browser and sends no data anywhere. -
How is the API token stored?
-
The token is stored as a WordPress option (
updawa_token) in your site’s database. It is never transmitted or logged by the plugin itself. -
What happens to my data when I delete the plugin?
-
The plugin registers an uninstall routine that removes the
updawa_tokenoption from the database when the plugin is deleted through the WordPress admin. -
Can I use the REST API from a remote monitoring system?
-
Yes. Copy the Bearer token from the Token API tab and include it as the
Authorizationheader in your HTTP requests. The endpoint returns a JSON snapshot of the current update status. -
How do I regenerate the token?
-
Open the Token API tab and click Regenerate token. The old token becomes invalid immediately.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“UpdaWa – the update watchdog” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “UpdaWa – the update watchdog” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.2
- Change plugin name to UpdaWa because Update Watchdog is too similar to existing ones
1.0.1
- Fixed regulatory compliance issues.
1.0.0
- Initial release.