Paste any WordPress address to see its plugins and theme. Every other detector stops there — this one also tells you how long since each was last updated, which is the part that matters.
Only the public page is read, and robots.txt is honoured. The result is saved at a private link so you can send it on — no account, no address, and search engines are told to skip it.
One email, only when something decays. Never a digest.
Plugins do not become abandoned on the day you look at them. This checks the site once a week and writes to you when a plugin crosses into stale or abandoned, or disappears from the directory — which is what a security removal looks like from outside.
Free for three sites. You will get one email asking you to confirm the address, and nothing at all until you click it. Every email after that carries a one-click stop link.
Measured from the directory itself, not estimated.
An abandoned plugin does not announce itself. It keeps working, it keeps its star rating, and its listing page carries no warning — because a listing that still converts has no reason to. The dashboard tells you an update is available. It never tells you that no update has come in three years.
That matters most for the plugins nobody thinks about: the login limiter, the backup runner, the form handler. They are installed once and then trusted indefinitely.
ACTIVE under 6 months · SLOWING 6–12 · STALE 12–24 · ABANDONED over 24 · UNLISTED not in the directory at all.
This measures maintenance, not quality. A small, finished plugin that genuinely needed no changes in three years grades ABANDONED and may still be the right choice. The grade is the start of a judgement, not the end of one.
UNLISTED deserves a second look. It means wordpress.org does not serve that slug — which covers both a premium plugin that was never in the directory and one that was pulled from it. Those are very different, and this cannot tell them apart from outside.
There is a command-line version that takes a list and exits non-zero if anything is abandoned, so it runs in cron or CI across every site you look after:
npx github:odedmoshe/marketscan audit plugins.txt
It is free, has no dependencies, and also covers VS Code extensions, Shopify apps and Chrome extensions — source and data on GitHub. The research behind the numbers above, with the raw datasets, is The Distribution Census.