# Introducing WP Composer, Roots updates, new WordPress projects and Acorn packages

**URL:** https://discourse.roots.io/t/introducing-wp-composer-roots-updates-new-wordpress-projects-and-acorn-packages/30237
**Category:** general
**Tags:** newsletter
**Created:** 2026-03-16T14:08:08Z
**Posts:** 1

## Post 1 by @ben — 2026-03-16T14:08:08Z

Hey y’all,

We built [WP Composer](https://wp-composer.com/), a fully open source, community-funded Composer repository for WordPress plugins and themes.

After WPackagist was acquired by WP Engine last week, we felt that infrastructure this central to the WordPress Composer workflow shouldn’t be controlled by a single corporation. WP Composer is an independent alternative built and maintained by Roots.

Every free plugin and theme from the [WordPress.org](http://WordPress.org) directory is available with clean package naming — `wp-plugin/*` and `wp-theme/*` instead of the old `wpackagist-plugin` and `wpackagist-theme` prefixes.

Migrating from WPackagist takes a few commands, or you can use our migration script. The [codebase is GitHub](https://github.com/roots/wp-composer). If you rely on Composer for WordPress, [consider sponsoring Roots](https://github.com/sponsors/roots) to keep this tooling independent.

WP Composer also supports Composer v2’s `metadata-url` protocol, which WPackagist lacks — meaning Composer fetches only the metadata it needs instead of downloading bulk provider indexes. In our benchmarks, cold resolves are [~17x faster](https://wp-composer.com/wp-composer-vs-wpackagist).

For a full breakdown, see [WP Composer vs WPackagist](https://wp-composer.com/wp-composer-vs-wpackagist).

Here’s everything else that’s new since our last update:

### Recent blog posts

- [Introducing WP Composer as a WPackagist Replacement](https://roots.io/introducing-wp-composer-as-a-wpackagist-replacement/) — An independent, community-funded Composer repository for WordPress plugins and themes

- [WordPress File Headers Have Overstayed Their Welcome](https://roots.io/wordpress-file-headers-have-overstayed-their-welcome/) — Why WordPress should replace its non-standard file header system with JSON-based metadata

- [Announcing Acorn AI](https://roots.io/announcing-acorn-ai/) — Integrate WordPress’s Abilities API with Laravel’s AI framework, define AI-powered capabilities as Laravel classes, and expose them as MCP tools

- [Announcing Acorn User Roles](https://roots.io/announcing-acorn-user-roles/) — Define user roles in a PHP config file instead of scattered database calls, with automatic syncing across environments

- [What’s New in Trellis (March 2026)](https://roots.io/whats-new-in-trellis-march-2026/) — HTTP/3 support, runtime hardening, Redis session storage, and more

- [What’s New in Bedrock v1.29.0](https://roots.io/whats-new-in-bedrock-v1-29-0/) — PHP 8.3 minimum, built-in Pest testing infrastructure, and bug fixes

### Roots project updates

**[Trellis v1.28.0–v1.29.0](https://github.com/roots/trellis/releases)** — HTTP/3 support, optional WordPress runtime hardening controls, Ansible 2.19 support, Redis PHP session storage, and multiple Nginx security fixes.

**[Bedrock v1.28.5–v1.29.2](https://github.com/roots/bedrock/releases)** — PHP 8.3 minimum, Pest testing scaffold, opt-in `WP_DEVELOPMENT_MODE` support, and env loading fixes.

**[Acorn v5.0.6](https://github.com/roots/acorn/releases)** — Output buffering fixes, PHP 8.5+ compatibility, and `ApplicationBuilder` middleware support. ([Lots more coming in the next upcoming release](https://github.com/roots/acorn/compare/v5.0.6...main), which will be soon)

**[Sage v11.0.2–v11.0.3](https://github.com/roots/sage/releases)** — Explicit Tailwind source globs, border radius presets in `wordpressThemeJson` (new feature from the latest release of our [vite-plugin](https://github.com/roots/vite-plugin)), and WP 6.9.1 block-style-variation fix.

**[Trellis CLI v1.16.0–v1.17.0](https://github.com/roots/trellis-cli/releases)** — New `server` commands with extensible provider support, Hetzner Cloud as a server provider, Lima HTTP port forwarding, VM `logs` command, and `--skip-tags` for provisioning.

**[Radicle v2.3.0–v2.3.2](https://github.com/roots/radicle/releases)** (must be a customer to view) — PHP 8.4 minimum, webfont setup, block rendering improvements, various refactors and bugfixes.

**[Bedrock Autoloader v1.1.0](https://github.com/roots/bedrock-autoloader/releases)** — New `bedrock_autoloader_load_plugins` filter for selectively excluding mu-plugins, symlink support, and safer synthetic activation hooks.

**wp-config v2 (coming soon)** — A complete rewrite with a fluent, chainable API. `Config::make($rootDir)->bootstrapEnv()` replaces manual Dotenv setup, `when()` enables conditional config, and instance-scoped hooks replace static methods. [Check out the README](https://github.com/roots/wp-config) for a preview. This will be one of the biggest changes coming to Bedrock v2.

**Scaffolding support for [acorn-example-package](https://github.com/roots/acorn-example-package)** — Our Acorn package template now supports scaffolding to help you get started building your own packages faster.

### New documentation

- [Trellis: Cron Jobs](https://roots.io/trellis/docs/cron-jobs/)

- [Trellis: Composer Authentication](https://roots.io/trellis/docs/composer-authentication/)

- [Trellis: Multiple Sites](https://roots.io/trellis/docs/multiple-sites/)

- [Bedrock: Testing](https://roots.io/bedrock/docs/testing/)

### WP-CLI i18n improvement for Blade component props

Our [PR to the WP-CLI i18n command](https://github.com/wp-cli/i18n-command/pull/474) was merged — `wp i18n make-pot` now extracts translatable strings from Blade component prop bindings (e.g., `:message="__('...', 'theme')"`). This should be included in the next WP-CLI release.

### WordPress news

- WordPress v7 will support [PHP-only block registration](https://make.wordpress.org/core/2026/03/03/php-only-block-registration/) — register server-side rendered blocks without any JavaScript

### WordPress projects and community Acorn packages

- **[MilliCache](https://millipress.com/)** — High-performance full-page caching for WordPress using Redis, ValKey, KeyDB, or Dragonfly ([Acorn integration](https://github.com/MilliPress/Acorn-MilliCache) available)

- [Substrate](https://github.com/digitalnodecom/substrate) — AI MCP server for development with Bedrock, Acorn, and Sage

- [40Q SEO Assistant](https://github.com/40Q/40q-seo-assistant) — Editor-side SEO metadata suggestions powered by Acorn

- [WP Query Block](https://github.com/yardinternet/wp-query-block) — An Acorn package providing a Query Block for the Gutenberg editor

- [WP-CLI All Sites](https://github.com/unlocnl/wp-cli-all-sites) — Run any WP-CLI command across every site in a multisite network with `--all-sites`

- [WP Queue Worker](https://github.com/Ultimate-Multisite/wp-queue-worker) — Event-loop job queue for WordPress using Workerman

- [WP Sudo](https://github.com/dknauss/wp-sudo) — Gate risky WordPress actions behind reauthentication with 2FA support

- [WP Malware Cleanup MCP](https://github.com/vapvarun/wp-malware-cleanup-mcp) — MCP server for cleaning malware from WordPress sites via SSH and WP-CLI

- [Omni Icon](https://github.com/nabasa-dev/omni-icon) — SVG icon library for WordPress

- [WP OpenCode](https://github.com/Extra-Chill/wp-opencode) — Bootstrap WordPress + OpenCode instances with pluggable chat interfaces

- [Excerpt Check](https://wordpress.org/plugins/excerpt-check/) — Prompts authors to add an excerpt before publishing

- [ByMiles AI](https://bymiles.ai/) — AI design partner that generates custom WordPress designs using native blocks

- [Git It Write](https://github.com/vaakash/git-it-write) — Automatically publish markdown files from GitHub as WordPress posts

* * *

If you benefit from our work, please [consider sponsoring us](https://github.com/sponsors/roots). Your support keeps our WordPress projects alive! All sponsors are invited to our Discord server where you can chat with our maintainers and other community members.

Thanks for reading

**Subscribe at [https://roots.io/newsletter/](https://roots.io/newsletter/)**

---

## Post 2 by @system — 2026-04-27T14:08:09Z

This topic was automatically closed after 42 days. New replies are no longer allowed.
