78% camoo-sso

Code Review | CAMOO SSO

WordPress plugin CAMOO SSO scored78%from 54 tests.

About plugin

  • Plugin page: camoo-sso
  • Plugin version: 1.5.2
  • PHP compatiblity: 7.4+
  • PHP version: 7.4.16
  • WordPress compatibility: 5.6-6.4.1
  • WordPress version: 6.3.1
  • First release: Jun 11, 2022
  • Latest release: Nov 12, 2023
  • Number of updates: 19
  • Update frequency: every 27.4 days
  • Top authors: camoo (100%)

Code review

54 tests

User reviews

1 review

Install metrics

100+ active /1,445 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | The install procedure must perform silently
Installer ran successfully

Server metrics [RAM: ▲0.19MB] [CPU: ▼2.48ms] Passed 4 tests

A check of server-side resources used by CAMOO SSO
This plugin does not affect your website's performance
PageMemory (MB)CPU Time (ms)
Home /3.64 ▲0.1742.41 ▲0.57
Dashboard /wp-admin3.54 ▲0.2449.13 ▼0.49
Posts /wp-admin/edit.php3.59 ▲0.2347.52 ▼1.16
Add New Post /wp-admin/post-new.php6.06 ▲0.1781.14 ▼8.84
Media Library /wp-admin/upload.php3.40 ▲0.1740.02 ▲5.48
Single Sign On /wp-admin/options-general.php?page=wp_camoo_sso_options3.3730.96

Server storage [IO: ▲0.33MB] [DB: ▲0.00MB] Passed 3 tests

Input-output and database impact of this plugin
There were no storage issued detected upon installing this plugin
Filesystem: 131 new files
Database: no new tables, 7 new options
New WordPress options
widget_recent-comments
can_compress_scripts
widget_recent-posts
widget_theysaidso_widget
wp_camoo_sso_options
theysaidso_admin_options
db_upgraded

Browser metrics Passed 4 tests

CAMOO SSO: an overview of browser usage
Normal browser usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,873 ▲12613.91 ▼0.461.81 ▲0.1045.20 ▼1.05
Dashboard /wp-admin2,193 ▲195.56 ▼0.0587.10 ▼24.9340.86 ▼11.41
Posts /wp-admin/edit.php2,104 ▲42.00 ▲0.0638.00 ▼1.4035.42 ▲0.47
Add New Post /wp-admin/post-new.php1,529 ▲323.24 ▲0.21685.02 ▼8.1163.84 ▲13.02
Media Library /wp-admin/upload.php1,404 ▲44.21 ▲0.0699.48 ▼11.7840.94 ▼3.93
Single Sign On /wp-admin/options-general.php?page=wp_camoo_sso_options9291.7827.0031.22

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | The uninstall procedure must remove all plugin files and extra database tables
These items require your attention
  • Zombie WordPress options detected upon uninstall: 6 options
    • widget_theysaidso_widget
    • db_upgraded
    • widget_recent-posts
    • can_compress_scripts
    • theysaidso_admin_options
    • widget_recent-comments

Smoke tests 50% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for server-side errors
The smoke test was a success, however most plugin functionality was not tested

SRP 0% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
Please take a closer look at the following
  • 8× GET requests to PHP files return non-empty strings:
    • > /wp-content/plugins/camoo-sso/src/Controller/AdminController.php
    • > /wp-content/plugins/camoo-sso/src/Services/Integration.php
    • > /wp-content/plugins/camoo-sso/src/Services/TokenService.php
    • > /wp-content/plugins/camoo-sso/src/Lib/ConstraintCollection.php
    • > /wp-content/plugins/camoo-sso/src/Lib/Helper.php
    • > /wp-content/plugins/camoo-sso/camoo-sso.php
    • > /wp-content/plugins/camoo-sso/src/Services/RewriteService.php
    • > /wp-content/plugins/camoo-sso/src/Services/CallbackService.php
  • 68× GET requests to PHP files trigger server-side errors or Error 500 responses (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Interface 'Lcobucci\\JWT\\Encoder' not found in wp-content/plugins/camoo-sso/vendor/lcobucci/jwt/src/Encoding/JoseEncoder.php:21
    • > PHP Fatal error
      Uncaught Error: Interface 'Lcobucci\\Clock\\Clock' not found in wp-content/plugins/camoo-sso/vendor/lcobucci/clock/src/SystemClock.php:11
    • > PHP Fatal error
      Uncaught Error: Interface 'Lcobucci\\JWT\\Validation\\ValidAt' not found in wp-content/plugins/camoo-sso/vendor/lcobucci/jwt/src/Validation/Constraint/StrictValidAt.php:14
    • > PHP Fatal error
      Uncaught Error: Class 'Lcobucci\\JWT\\Signer\\OpenSSL' not found in wp-content/plugins/camoo-sso/vendor/lcobucci/jwt/src/Signer/Rsa.php:8
    • > PHP Fatal error
      Uncaught Error: Class 'Lcobucci\\JWT\\Signer\\UnsafeRsa' not found in wp-content/plugins/camoo-sso/vendor/lcobucci/jwt/src/Signer/Rsa/UnsafeSha384.php:11
    • > PHP Fatal error
      Uncaught Error: Interface 'Lcobucci\\JWT\\Exception' not found in wp-content/plugins/camoo-sso/vendor/lcobucci/jwt/src/Validation/Constraint/CannotValidateARegisteredClaim.php:9
    • > PHP Fatal error
      Uncaught Error: Class 'Lcobucci\\JWT\\Signer\\Ecdsa' not found in wp-content/plugins/camoo-sso/vendor/lcobucci/jwt/src/Signer/Ecdsa/Sha384.php:10
    • > PHP Fatal error
      Uncaught Error: Interface 'Lcobucci\\JWT\\Exception' not found in wp-content/plugins/camoo-sso/vendor/lcobucci/jwt/src/Validation/RequiredConstraintsViolated.php:12
    • > PHP Fatal error
      Uncaught Error: Interface 'Lcobucci\\JWT\\Validation\\Constraint' not found in wp-content/plugins/camoo-sso/vendor/lcobucci/jwt/src/Validation/Constraint/RelatedTo.php:10
    • > PHP Fatal error
      Uncaught Error: Class 'Lcobucci\\JWT\\Signer\\Hmac' not found in wp-content/plugins/camoo-sso/vendor/lcobucci/jwt/src/Signer/Hmac/UnsafeSha512.php:9

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a smoke test targeting browser errors/issues
Everything seems fine, but this is not an exhaustive test

Optimizations

Plugin configuration 96% from 29 tests

readme.txt Passed 16 tests

It's important to format your readme.txt file correctly as it is parsed for the public listing of your plugin
4 plugin tags: managed hosting with sso, camoohosting, hbergement web avec sso, camoo sso integration

camoo-sso/camoo-sso.php 92% from 13 tests

The entry point to "CAMOO SSO" version 1.5.2 is a PHP file that has certain tags in its header comment area
You should first fix the following items:
  • Domain Path: The domain path is invalid: folder "/languages" does not exist

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | There should be no dangerous file extensions present in any WordPress plugin
Everything looks great! No dangerous files found in this plugin5,993 lines of code in 119 files:
LanguageFilesBlank linesComment linesLines of code
PHP1101,0118783,920
CSS376481,791
JSON400268
JavaScript11012
Markdown1002

PHP code Passed 2 tests

This is a short overview of cyclomatic complexity and code structure for this plugin
No cyclomatic complexity issues were detected for this plugin
Cyclomatic complexity
Average complexity per logical line of code0.31
Average class complexity3.77
▷ Minimum class complexity1.00
▷ Maximum class complexity48.00
Average method complexity1.76
▷ Minimum method complexity1.00
▷ Maximum method complexity18.00
Code structure
Namespaces18
Interfaces17
Traits0
Classes84
▷ Abstract classes67.14%
▷ Concrete classes7892.86%
▷ Final classes7393.59%
Methods399
▷ Static methods7418.55%
▷ Public methods33483.71%
▷ Protected methods71.75%
▷ Private methods5814.54%
Functions8
▷ Named functions00.00%
▷ Anonymous functions8100.00%
Constants67
▷ Global constants45.97%
▷ Class constants6394.03%
▷ Public constants4266.67%

Plugin size Passed 2 tests

Image compression Passed 2 tests

Using a strong compression for your PNG files is a great way to speed-up your plugin
2 PNG files occupy 0.10MB with 0.06MB in potential savings
Potential savings
Compression of 2 random PNG files using pngquant
FileSize - originalSize - compressedSavings
assets/images/logo.png61.07KB24.72KB▼ 59.51%
assets/images/Selection_172.png40.31KB16.24KB▼ 59.72%