eighteen73/orbit

Opinionated WordPress behaviour overrides

Maintainers

Package info

github.com/eighteen73/orbit

Type:wordpress-muplugin

pkg:composer/eighteen73/orbit

Transparency log

Statistics

Installs: 3 729

Dependents: 1

Suggesters: 0

Stars: 3

Open Issues: 3

Security

Advisories: 0

Aikido package health analysis

v2.7.0 2026-07-29 13:35 UTC

Requires

  • php: >=8.0

Requires (Dev)

MIT 459dcda54d787ae6beb893c15ef5d2a7acf4ddf2

Published on Packagist.org on 2026-07-29 13:36 UTC

This package is auto-updated.

Last update: 2026-07-29 13:36:53 UTC

README

Orbit moulds WordPress default behaviour to simplify the CMS experience, protect users from changing settings that should be reserved for website developers, and reinforce areas of the CMS that tend to be fragile or noisy.

The plugin is unapologetically opinionated to fit the needs and preferences of our web agency.

For complete documentation, visit docs.eighteen73.co.uk/wordpress/plugins/orbit.

Installation

Assuming you are using a modern Composer workflow for WordPress development (such as our Nebula WordPress stack), install Orbit as a Must-Use plugin using:

composer require eighteen73/orbit

For manual installation or non-Composer environments, see the Installation Guide.

Features Overview

  • Synced Theme Patterns: Keeps block theme pattern files in version control while syncing them to real database patterns with block overrides.
  • Branded Emails: Wraps system emails and Gravity Forms notifications in responsive HTML with WooCommerce styling parity.
  • UI Cleanup: Simplifies admin menus, toolbar nodes, and dashboard widgets, with custom login logo and environment indicator badge support.
  • Security Hardening: Blocks REST API user enumeration, disables XML-RPC, strips head tags, and enforces baseline HTTP security headers.
  • Capabilities & Access: Granular permission management for Editors and Shop Managers across Site Editor, User management, Gravity Forms, and Privacy options.
  • Performance & Utilities: Fast 404 responses for missing static assets, remote media hotlinking from production, health check endpoint (/wp-json/orbit/up), and search engine index suppression on non-production.
  • Integrations: Performance and safety tweaks for WooCommerce, Action Scheduler, and Altcha CAPTCHA.

For a complete reference of filter hooks and constants, see the Filters & Hooks Reference.

Vendored Dependencies

Orbit ships a small number of vendored third-party libraries under includes/lib/, namespaced via Mozart into Eighteen73\Orbit\Dependencies\… to avoid collisions.

To refresh these dependencies after pulling updates:

composer install
composer update <vendor>/<package>
vendor/bin/mozart compose
composer dump-autoload

For security advisory notes, refer to the Installation Documentation.