I love using the trellis/bedrock/composer stack; it works very well for me. However, my one hiccup is storing Private Wordpress Themes/Plugins. SatisPress does a great job solving that, but the problem I continue to run into is that for the number of private plugins my company uses, 200+ (with all the little addon plugins for larger ecosystem plugins like crocoblock and random plugins for clients), we have to maintain several SatisPress sites (8 now).
If we were to put all those plugins into a single WordPress site, activate them, and have it watch for plugin updates, then the site grinds to a halt.
If we use multiple Satispress sites, we would have to add all the composer repos to each project. If there is ever a reason for changing a SatisPress composer authentication, then we have to go through and update the trellis vault vars for every client, and that’s time-consuming.
I wanted a way to aggregate all the plugins from the various SatisPress repos, so I built it. Check it out here: Your Digital Toolbox - WordPress · GitHub
It’s built on top of GitHub and has GitHub workflows to manage collecting updates from the various SatisPress sites,
The whole GitHub org is dedicated to just watching for plugin updates.
It uses GitHub pages to host a packages.json file with all the info the composer needs to locate each package/tag/version inside the org, and we use a read-only GitHub fine-grained access token with BASIC auth to authenticate trellis/composer to access all of the plugin packages.
I like this better because I only have to add a single composer repository to trellis, and I only have a single composer auth.json that gets added to the bedrock site. Additionally, everything is hosted on GitHub, which is battle-tested and fairly robust at staying available.
I am curious what people think of this concept. I have been using it for the last few months, and it works well. Most of the bugs have been worked out.
If people are interested, I could do a video on how to set the org up for a new agency.