Modules Insight

1. 01Upload the modules-insight folder to the /wp-content/plugins/ directory, or install through the WordPress plugin screen directly (Plugins > Add New).
2. 02Activate the plugin through the Plugins menu in WordPress.
3. 03Check your Dashboard for the “Modules Insight – Plugin List” widget, or use the shortcode [plugin_list] on any page or post.
4. 04Press Scan Plugins to load the plugin list.
5. 05Pick your Target PHP and Target WP versions, then press Check Upgrade Compatibility to run the risk evaluation against the WordPress.org API.
6. 06Once the scan is complete, press Download List as JSON , Download List as CSV , Download List as Excel , or Send report to Google Sheet to export the full report, including the compatibility data.
7. 07Optionally, set up the Google Sheets export and (on WordPress 7.0+) the AI Q&A under Settings → Modules Insight .

How is the PHP upgrade risk calculated?

Risk is based on two signals pulled from the WordPress.org plugin directory for each plugin:

1. Last Updated — how recently the plugin received a published release. 2. Minimum PHP Declared — the Requires PHP value the author set on WordPress.org.

The rating is assigned as follows:

• High — Not updated in over 3 years, OR declares a minimum PHP below 7.0. Investigate before upgrading.
• Low — Updated within 12–18 months AND declares PHP 7.4 or higher as its minimum.
• Medium — Anything between High and Low. Test on staging before upgrading production.
• Not on WP.org — Plugin not found in the directory. Risk must be assessed manually.

These are metadata signals, not a code scan. Always test on a staging environment before upgrading PHP on a live server.

Why is my recently-updated plugin showing as Medium instead of Low?

The most common reason is that the plugin’s Requires PHP field on WordPress.org is set below 7.4 — even if the plugin runs perfectly on modern PHP. Authors often set this conservatively and forget to update it. In this case Medium does not mean the plugin is broken; it means the metadata is incomplete. Check the plugin’s own changelog or test directly on staging.

What does “Not on WP.org” mean in the risk table?

The plugin was not found in the WordPress.org directory. This is normal for premium plugins (WooCommerce extensions, page builder add-ons, etc.) and custom-built plugins. Their compatibility cannot be assessed automatically — check with the vendor or test directly on a staging environment running the target PHP version.

Are the risk ratings a guarantee?

No. They are a triage guide based on publicly available metadata. A Low-rated plugin could still have incompatibilities; a High-rated plugin might work perfectly. The table helps you decide where to focus your testing effort, not whether to skip testing altogether.

Does this plugin make any changes to my site?

No. MI does not activate, deactivate, install, or delete any plugins, and it never modifies your site’s data. The only write it performs anywhere is appending report rows to a Google Sheet you configure — and only when you press Send report to Google Sheet .

How does the Google Sheets export work? Do I need a Google Cloud account?

No Google Cloud project, no API keys. You create a normal Google Sheet, add a short Google Apps Script (provided on the settings page) and deploy it as a Web App. You then paste that Web App URL and a shared secret token into Settings → Modules Insight . The plugin POSTs the report to your script, which appends the rows. The token is stored in your database (or a wp-config.php constant) and is never shown again after saving.

What does “Ask AI” need?

WordPress 7.0 or newer (the AI Client ships in core from 7.0), with an AI provider (Anthropic, Google, or OpenAI) configured by an administrator in your site’s AI settings. Modules Insight uses the core AI Client — it stores no API keys of its own. If no provider can serve a request, the “Ask AI” button doesn’t appear and the settings page explains why. If the “Connector Approvals” experiment is enabled, an administrator must approve Modules Insight after its first request. Answers are cached for 12 hours per question to limit provider costs.

Who can see the plugin list and run the compatibility check?

Only users with the activate_plugins capability (typically Administrators). The settings page requires manage_options .

What formats can I export?

JSON, CSV, Excel, or a Google Sheet. All include the PHP and WordPress compatibility data (last updated, “tested up to”, minimum PHP, both risk levels) for any plugin that has been checked. Plugins not yet checked show not_checked in those fields.

Can I use this on a live/production site?

Yes. MI loads no assets unless an admin explicitly presses Scan, and makes no outbound requests except the admin-initiated ones listed under “External services” above.