Repository and licence
Deliver source history, build instructions, third-party licences and clear ownership.
Compatibility contract
State WordPress, PHP and dependency versions plus what was actually tested.
Configuration map
Document settings, defaults, migrations and what changes per environment.
Security and privacy
List capabilities, nonces, input/output handling, stored data, retention and external requests.
Tests and acceptance
Include static checks, focused automated tests and a repeatable browser or integration flow.
Release and rollback
Version assets, retain the previous artifact, describe database changes and prove the rollback path.
Support and changelog
Give users one canonical URI, a security contact and a factual release history.