Simple Outbound Webhooks

WordPress plugin that sends selected site events (post published/updated/trashed, comment posted/approved, user registered) as JSON to any HTTPS endpoint you configure: n8n, Make, Zapier, or your own service. Optional HMAC-SHA256 signature per endpoint, delivery log, test button, developer filters. Plain PHP, no build step, no external services, no telemetry.

• Plugin folder: simple-outbound-webhooks/ (this is what ships to wordpress.org)
• Release archive: dist/simple-outbound-webhooks-1.0.0.zip
• Quality evidence (Plugin Check, PHPCS, Docker end-to-end with signature verification): QUALITY-NOTES.md
• Dev harness: dev/ (docker compose, E2E script), phpcs.xml.dist

Signature verification

Header X-SOW-Signature: sha256=<hex> where hex = HMAC_SHA256(secret, X-SOW-Timestamp + "." + raw_body). Compare in constant time.

License

GPL-2.0-or-later. Author: svtxvt (wordpress.org: svtxvt1).