composer require meteorgpl-plugin/<slug>
MeteorGPL is a private Composer repository: the GPL code of premium plugins and themes, built from the original archives, scanned for malware and versioned — with the vendor’s license checks intact.
MeteorGPL by WebbingApps is operated by WebbingApps OÜ, a company registered in Estonia (EU). Subscriptions are invoiced by WebbingApps OÜ through Stripe.
Register the repository, store a token from your account, then require any plugin or theme.
composer config repositories.meteorgpl composer https://composer.meteorgpl.comcomposer config --global http-basic.composer.meteorgpl.com token <your-token>composer require meteorgpl-plugin/supreme-modules-pro-for-divi
composer require meteorgpl-theme/greenmart-childPackages are named meteorgpl-plugin/<slug> and meteorgpl-theme/<slug>, where the slug is the plugin’s or theme’s own folder name.
meteorgpl-plugin/supreme-modules-pro-for-divi
Divi Supreme Pro enhances the experience and features found on Divi 4 and Divi 5. Packed with everything you need to build amazing websites with ease.
meteorgpl-theme/greenmart-child
Child theme of greenmart
This is a child theme for GreenMart
meteorgpl-theme/billey-child
Child theme of Billey
meteorgpl-plugin/w3-total-cache
Search Engine (SEO) & Performance Optimization (WPO) via caching. Integrated caching: CDN, Page, Minify, Object, Fragment, Database support.
meteorgpl-plugin/wpml-troubleshooting
The repair tools for a WPML site, as a plugin of their own | Documentation | WPML Troubleshooting 5.3.0 release notes
meteorgpl-plugin/wpml-elasticpress
Add full WPML support for ElasticPress.
Every version is scanned for malware and nulling code before it is published. License checks, activation and updates stay exactly as the vendor ships them.
Tags per vendor release, a reproducible composer.lock, rollbacks to any published version.
Bedrock-style projects, CI with auth.json or COMPOSER_AUTH, the same command for every plugin and theme.
GPL code only, artwork stripped, a published takedown policy. Support and updates come with the license you buy from the vendor.
More than a Composer repository: every public vulnerability report for WordPress plugins and themes is matched against the catalogue and against the versions you run. When one affects you, you are told, with the version that fixes it.
43,262 vulnerability records are checked several times a day; 3,100 affect packages in the catalogue.
Watchers of the package and accounts known to run an affected version, from their composer.lock or their downloads, are alerted once: in the inbox, by e-mail or push, and by webhook.
The alert names the version that fixes the vulnerability and the composer require line. When no fix exists yet, it says so and follows up as soon as one reaches the repository.
Vulnerability data: Wordfence Intelligence. Each advisory links to its record there.
Copyright 2012-2026 Defiant Inc.. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. https://www.cve.org/Legal/TermsOfUse
This is not a “nulled plugins” site. Nothing in a package is modified to bypass the vendor’s licensing: license checks, activation and update code are kept exactly as the vendor ships them. The repository redistributes the code under the GPL the vendor declared, strips artwork and other assets that are not necessarily GPL, scans every version for malware before publication and keeps a takedown policy. Vendor support and update entitlement stay with the license you buy from the vendor.