BloomWatcher – Live Server & Site Health Dashboard

0.5.6

• Compliance: Plugin Performance is now a Pro feature, and its optional must-use profiler file (wp-content/mu-plugins/wlsm-profiler.php) is never installed automatically. It is a fixed, bundled file — never generated on the fly — that is added only after you explicitly opt in from the dashboard (with a clear notice about what it adds and where), and it can be removed again from the same panel. The free build ships none of this code and writes nothing to wp-content/mu-plugins.

0.5.5

• Compliance: the free build no longer ships any one-click-fix code. The Apply/Undo control — its REST route, the diagnosis action and all front-end handling — now lives entirely in the Pro add-on; the free diagnosis links to the official WordPress hardening guide instead. No built-in feature is gated by a license check.

0.5.4

• Compliance: the one-click hardening fix and the Plugin Performance profiler are no longer locked behind upgrade prompts — one-click fixes moved entirely into the Pro add-on (the free diagnosis links to manual instructions), and Plugin Performance is now fully free.
• Compliance: the domain-registration (RDAP) lookup moved into the Pro add-on, so the free build makes no outbound RDAP call. The free build’s only external services are now api.wordpress.org (abandoned-plugin dates) and Freemius (licensing/updates), both documented under “External services” with terms and privacy links.
• Maintenance: removed dead code and added a full uninstall cleanup (options, transients and the time-series table).

0.5.3

• Renamed the plugin to “BloomWatcher”. No functional changes — internal identifiers and your settings are untouched.

0.5.2

• Packaging: the Freemius SDK is now managed with Composer under vendor/, per WordPress.org guidance for bundling third-party libraries. No functional changes.

0.5.1

• Renamed the plugin to “Live Server Monitor”. No functional changes — internal identifiers and your settings are untouched.

0.5.0

• New: Domain registration expiry (RDAP) and a DNS “points here?” check.
• New: Autoload options analysis — surface the autoloaded data weighing down every request.
• New (Pro): Smart alerts engine — CPU, RAM, disk, SSL and domain-expiry thresholds delivered to email, Telegram, Slack or Discord, with start/clear notifications.
• New (Pro): History & trends — 24h / 7d / 30d graphs backed by a lightweight time-series sampler that runs on wp-cron (no setup).
• New (Agency): Multi-site hub — monitor up to 20 connected sites from one dashboard, with centralized alerts across all sites and domains.
• New: translations for German, French, Japanese, Spanish, Brazilian Portuguese, Italian, Dutch, Russian and Korean.
• Hardening: security review pass (SSRF-guarded site connections, HTTPS-only hub, throttled sampling endpoint, license-gating integrity).

0.4.0

• New: Plugin Performance panel — ranks active plugins by how long they take to load (and how much memory they allocate) on each request, so you can spot the heavyweights at a glance.
• Measured by a tiny must-use drop-in (wlsm-profiler.php) installed automatically on activation and removed on deactivation; it hooks WordPress’s per-plugin plugin_loaded event, samples with near-zero overhead and writes a throttled, smoothed summary. Shows “load time” honestly — boot cost per request, not full runtime.
• New: GET /wlsm/v1/performance endpoint (admin-only) backing the panel.

0.3.0

• New: actionable Health Diagnosis. Each finding now offers the right next step — a one-click “Apply” for fixes the plugin can safely enforce itself (disable XML-RPC, disable the file editor, both reversible), a deep link to the correct admin screen for things it can’t do for you (updates, install 2FA, object cache), or a plain explanation when only a server change will do.
• New: POST /wlsm/v1/fix endpoint (admin-only) backing the one-click fixes, stored as a reversible option.

0.2.0

• New: Health Diagnosis panel — a scored (0–100) security / performance / maintenance check-up with warnings, recommendations and fix hints, served from a separate cached /wlsm/v1/health endpoint with a manual re-scan.
• Performance: CPU usage is now sampled across polls instead of blocking the request with a 200ms sleep.
• Performance: the SSL certificate probe is cached (12h) instead of running a TLS handshake on every poll.

0.1.0

• Initial MVP: live single-server dashboard with CPU, memory, disk, system, PHP, database, web server, SSL and WordPress cards.