84% gf-webhook-signature

Code Review | Webhook Signature add-on for Gravity Forms

WordPress plugin Webhook Signature add-on for Gravity Forms scored84%from 54 tests.

About plugin

  • Plugin page: gf-webhook-signature
  • Plugin version: 1.0
  • PHP compatiblity: 7.0+
  • PHP version: 7.4.16
  • WordPress compatibility: 4.0-5.6
  • WordPress version: 6.3.1
  • First release: Feb 17, 2021
  • Latest release: Feb 17, 2021
  • Number of updates: 2
  • Update frequency: N/A
  • Top authors: danielboven (100%)

Code review

54 tests

User reviews

1 review

Install metrics

10+ active /355 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | All plugins must install correctly, without throwing any errors, warnings, or notices
This plugin's installer ran successfully

Server metrics [RAM: ▼0.00MB] [CPU: ▼6.19ms] Passed 4 tests

An overview of server-side resources used by Webhook Signature add-on for Gravity Forms
This plugin does not affect your website's performance
PageMemory (MB)CPU Time (ms)
Home /3.47 ▲0.0137.63 ▼1.88
Dashboard /wp-admin3.31 ▼0.0345.91 ▼13.30
Posts /wp-admin/edit.php3.36 ▲0.0145.91 ▼0.73
Add New Post /wp-admin/post-new.php5.89 ▲0.0186.41 ▼8.85
Media Library /wp-admin/upload.php3.23 ▲0.0133.68 ▼0.66

Server storage [IO: ▲0.01MB] [DB: ▲0.00MB] Passed 3 tests

How much does this plugin use your filesystem and database?
The plugin installed successfully
Filesystem: 5 new files
Database: no new tables, 6 new options
New WordPress options
widget_recent-posts
db_upgraded
theysaidso_admin_options
widget_recent-comments
widget_theysaidso_widget
can_compress_scripts

Browser metrics Passed 4 tests

Webhook Signature add-on for Gravity Forms: an overview of browser usage
This plugin has a minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,800 ▲2914.80 ▲0.421.75 ▼0.1944.09 ▲3.54
Dashboard /wp-admin2,206 ▲184.80 ▼0.06105.18 ▼7.5841.16 ▼1.29
Posts /wp-admin/edit.php2,089 ▲32.03 ▲0.0337.00 ▼0.0132.36 ▼0.84
Add New Post /wp-admin/post-new.php1,533 ▼023.20 ▲0.06650.86 ▲2.3755.39 ▲1.96
Media Library /wp-admin/upload.php1,388 ▼04.22 ▲0.0597.72 ▼2.5142.49 ▼1.18

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | It is important to correctly uninstall your plugin, without leaving any traces
It is recommended to fix the following
  • Zombie WordPress options detected upon uninstall: 6 options
    • theysaidso_admin_options
    • db_upgraded
    • widget_recent-posts
    • can_compress_scripts
    • widget_recent-comments
    • widget_theysaidso_widget

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no server-side errors were triggered
Everything seems fine, however this is by no means an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle applies for WordPress plugins as well - please make sure your PHP files perform no actions when accessed directly
Almost there! Just fix the following items
  • 2× PHP files trigger server-side errors or warnings when accessed directly:
    • > PHP Fatal error
      Uncaught Error: Call to undefined function add_action() in wp-content/plugins/gf-webhook-signature/signature.php:13
    • > PHP Fatal error
      Uncaught Error: Class 'GFForms' not found in wp-content/plugins/gf-webhook-signature/class-gfwebhooksignature.php:3

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a smoke test targeting browser errors/issues
Everything seems fine on the user side

Optimizations

Plugin configuration 96% from 29 tests

readme.txt Passed 16 tests

Don't ignore readme.txt as it is the file that instructs WordPress.org on how to present your plugin to the world
7 plugin tags: forms, verify, gravity, header, signature...

gf-webhook-signature/signature.php 92% from 13 tests

The principal PHP file in "Webhook Signature add-on for Gravity Forms" v. 1.0 is loaded by WordPress automatically on each request
Please make the necessary changes and fix the following:
  • Main file name: Please rename the main PHP file in this plugin to the plugin slug ("gf-webhook-signature.php" instead of "signature.php")

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are not allowed as they can serve as attack vectors
Everything looks great! No dangerous files found in this plugin176 lines of code in 4 files:
LanguageFilesBlank linesComment linesLines of code
PHP24267156
JavaScript216320

PHP code Passed 2 tests

Cyclomatic complexity and code structure are the fingerprint of this plugin
No cyclomatic complexity issues were detected for this plugin
Cyclomatic complexity
Average complexity per logical line of code0.19
Average class complexity5.00
▷ Minimum class complexity2.00
▷ Maximum class complexity8.00
Average method complexity1.80
▷ Minimum method complexity1.00
▷ Maximum method complexity4.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes2
▷ Abstract classes00.00%
▷ Concrete classes2100.00%
▷ Final classes00.00%
Methods10
▷ Static methods220.00%
▷ Public methods10100.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions1
▷ Named functions1100.00%
▷ Anonymous functions00.00%
Constants1
▷ Global constants1100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

It is recommended to compress PNG files in your plugin to minimize bandwidth usage
There were not PNG files found in your plugin