84% heslo-login

Code Review | Passwordless Login

WordPress plugin Passwordless Login scored84%from 54 tests.

About plugin

  • Plugin page: heslo-login
  • Plugin version: 1.0.2
  • PHP compatiblity: 7.0+
  • PHP version: 7.4.16
  • WordPress compatibility: 5.1-5.7.2
  • WordPress version: 6.3.1
  • First release: Jun 9, 2021
  • Latest release: Jul 8, 2021
  • Number of updates: 5
  • Update frequency: every 5.8 days
  • Top authors: cmccaw (100%)

Code review

54 tests

User reviews

2 reviews

Install metrics

10+ active /589 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | All plugins must install correctly, without throwing any errors, warnings, or notices
The plugin installed gracefully, with no errors

Server metrics [RAM: ▼0.62MB] [CPU: ▼14.61ms] Passed 4 tests

This is a short check of server-side resources used by Passwordless Login
Server-side resource usage in normal parameters
PageMemory (MB)CPU Time (ms)
Home /3.52 ▲0.0640.03 ▼4.45
Dashboard /wp-admin3.36 ▲0.0552.29 ▼0.35
Posts /wp-admin/edit.php3.47 ▲0.1151.68 ▲6.57
Add New Post /wp-admin/post-new.php3.23 ▼2.6638.41 ▼53.45
Media Library /wp-admin/upload.php3.28 ▲0.0537.48 ▼0.17
Heslo Login /wp-admin/options-general.php?page=heslo-login-settings3.2532.29

Server storage [IO: ▲1.03MB] [DB: ▲0.00MB] Passed 3 tests

How much does this plugin use your filesystem and database?
No storage issues were detected
Filesystem: 18 new files
Database: no new tables, 7 new options
New WordPress options
db_upgraded
widget_recent-comments
can_compress_scripts
abl_heslo_login_version
widget_recent-posts
theysaidso_admin_options
widget_theysaidso_widget

Browser metrics Passed 4 tests

Checking browser requirements for Passwordless Login
Minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,826 ▲6513.94 ▼0.441.87 ▲0.0844.32 ▼0.92
Dashboard /wp-admin2,199 ▲255.57 ▼0.04131.87 ▲28.0638.63 ▼6.13
Posts /wp-admin/edit.php2,104 ▲222.01 ▲0.0041.80 ▲7.3334.24 ▼0.48
Add New Post /wp-admin/post-new.php1,529 ▲323.49 ▲0.45684.17 ▼6.5359.93 ▼3.50
Media Library /wp-admin/upload.php1,398 ▼24.29 ▲0.10100.24 ▼3.0344.91 ▼2.25
Heslo Login /wp-admin/options-general.php?page=heslo-login-settings8462.5963.7627.16

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
You still need to fix the following
  • Zombie WordPress options detected upon uninstall: 6 options
    • db_upgraded
    • widget_recent-posts
    • widget_theysaidso_widget
    • can_compress_scripts
    • widget_recent-comments
    • theysaidso_admin_options

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a short smoke test looking for server-side errors
Good news, no errors were detected

SRP 50% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
Please take a closer look at the following
  • 1× GET requests to PHP files trigger server-side errors or Error 500 responses:
    • > PHP Fatal error
      Uncaught Error: Call to undefined function update_option() in wp-content/plugins/heslo-login/heslo-login.php:22

User-side errors Passed 1 test

🔹 Test weight: 20 | This is just a short smoke test looking for browser issues
Everything seems fine, but this is not an exhaustive test

Optimizations

Plugin configuration Passed 29 tests

readme.txt Passed 16 tests

The readme.txt file is important because it is parsed by WordPress.org for the public listing of your plugin
5 plugin tags: security, identity, fido, authentication, login

heslo-login/heslo-login.php Passed 13 tests

The entry point to "Passwordless Login" version 1.0.2 is a PHP file that has certain tags in its header comment area
57 characters long description:
Passwordless login for your users using Touch and Face ID

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | This is an overview of file extensions present in this plugin and a short test that no dangerous files are bundled with this plugin
Success! There were no dangerous files found in this plugin557 lines of code in 12 files:
LanguageFilesBlank linesComment linesLines of code
PHP35748247
JavaScript52840174
Markdown145073
HTML20032
JSON10031

PHP code Passed 2 tests

A short review of cyclomatic complexity and code structure
This plugin has no cyclomatic complexity problems
Cyclomatic complexity
Average complexity per logical line of code0.22
Average class complexity0.00
▷ Minimum class complexity0.00
▷ Maximum class complexity0.00
Average method complexity0.00
▷ Minimum method complexity0.00
▷ Maximum method complexity0.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes0
▷ Abstract classes00.00%
▷ Concrete classes00.00%
▷ Final classes00.00%
Methods0
▷ Static methods00.00%
▷ Public methods00.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions20
▷ Named functions1680.00%
▷ Anonymous functions420.00%
Constants1
▷ Global constants1100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

All PNG images should be compressed to minimize bandwidth usage for end users
2 PNG files occupy 0.46MB with 0.33MB in potential savings
Potential savings
Compression of 2 random PNG files using pngquant
FileSize - originalSize - compressedSavings
img/settings.png159.57KB43.28KB▼ 72.88%
img/header.png313.62KB93.39KB▼ 70.22%