WordPress plugin Meveto scored58%from 54 tests.

About plugin

  • Plugin page: login-with-meveto...
  • Plugin version: 3.0.2
  • PHP compatiblity: 5.2.4+
  • PHP version: 7.4.16
  • WordPress compatibility: 4.6-5.7
  • WordPress version: 6.3.1
  • First release: Apr 30, 2020
  • Latest release: May 10, 2021
  • Number of updates: 19
  • Update frequency: every 19.8 days
  • Top authors: meveto (100%)

Code review

54 tests

User reviews

1 review

Install metrics

10+ active /750 total downloads

Benchmarks

Plugin footprint 48% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Verifying that this plugin installs correctly without errors
Installer ran successfully

Server metrics [RAM: ▼0.07MB] [CPU: ▼12.32ms] Passed 4 tests

A check of server-side resources used by Meveto
This plugin does not affect your website's performance
PageMemory (MB)CPU Time (ms)
Home /2.87 ▼0.5918.36 ▼29.44
Dashboard /wp-admin3.41 ▲0.1142.58 ▼4.10
Posts /wp-admin/edit.php3.45 ▲0.0946.43 ▲0.67
Add New Post /wp-admin/post-new.php6.10 ▲0.2275.04 ▼16.40
Media Library /wp-admin/upload.php3.35 ▲0.1236.19 ▲3.71

Server storage [IO: ▲2.37MB] [DB: ▲0.00MB] Passed 3 tests

A short overview of filesystem and database impact
There were no storage issued detected upon installing this plugin
Filesystem: 435 new files
Database: 2 new tables, 9 new options
New tables
wp_meveto_states
wp_meveto_users
New WordPress options
widget_meveto\frontend\mevetooauthwidget
meveto_login_with_meveto_page
db_upgraded
widget_recent-posts
widget_recent-comments
widget_theysaidso_widget
theysaidso_admin_options
meveto_connect_page
can_compress_scripts

Browser metrics Passed 4 tests

A check of browser resources used by Meveto
Normal browser usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,893 ▲12213.56 ▼0.822.53 ▲0.3542.63 ▼3.00
Dashboard /wp-admin2,231 ▲465.07 ▲0.16106.40 ▼1.6337.82 ▼11.52
Posts /wp-admin/edit.php2,123 ▲342.32 ▲0.2738.92 ▲1.5733.81 ▼1.80
Add New Post /wp-admin/post-new.php1,542 ▲923.34 ▲0.10677.27 ▼12.3837.34 ▼27.21
Media Library /wp-admin/upload.php1,419 ▲344.34 ▲0.2396.63 ▼26.2141.98 ▼13.60

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 25% from 4 tests

🔸 Tests weight: 35 | The uninstall procedure must remove all plugin files and extra database tables
It is recommended to fix the following
  • Uninstall procedure validation failed for this plugin
    • > Notice in wp-content/plugins/login-with-meveto-oauth-client/Admin/MevetoOAuthAdmin.php+41
    Undefined index: action
  • This plugin does not fully uninstall, leaving 2 tables in the database
    • wp_meveto_users
    • wp_meveto_states
  • Zombie WordPress options were found after uninstall: 9 options
    • widget_recent-posts
    • meveto_connect_page
    • widget_theysaidso_widget
    • can_compress_scripts
    • widget_recent-comments
    • widget_meveto\frontend\mevetooauthwidget
    • meveto_login_with_meveto_page
    • db_upgraded
    • theysaidso_admin_options

Smoke tests 50% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a short smoke test looking for server-side errors
Even though no errors were found, this is by no means an exhaustive test

SRP 0% from 2 tests

🔹 Tests weight: 20 | It is important to ensure that your PHP files perform no action when accessed directly, respecting the single-responsibility principle
The following issues need your attention
  • 1× PHP files perform the task of outputting text when accessed with GET requests:
    • > /wp-content/plugins/login-with-meveto-oauth-client/tests/bootstrap.php
  • 302× GET requests to PHP files have triggered server-side errors or warnings (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Class 'ParagonIE_Sodium_Core32_Util' not found in wp-content/plugins/login-with-meveto-oauth-client/vendor/paragonie/sodium_compat/src/Core32/Poly1305/State.php:10
    • > PHP Fatal error
      Uncaught Error: Class 'Composer\\Installers\\BaseInstaller' not found in wp-content/plugins/login-with-meveto-oauth-client/vendor/composer/installers/src/Composer/Installers/AttogramInstaller.php:4
    • > PHP Notice
      Constant SODIUM_CRYPTO_BOX_SECRETKEYBYTES already defined in wp-content/plugins/login-with-meveto-oauth-client/vendor/paragonie/sodium_compat/lib/php72compat_const.php on line 30
    • > PHP Notice
      Constant SODIUM_CRYPTO_AEAD_CHACHA20POLY1305_NSECBYTES already defined in wp-content/plugins/login-with-meveto-oauth-client/vendor/paragonie/sodium_compat/lib/php72compat_const.php on line 16
    • > PHP Fatal error
      Uncaught Error: Class 'Composer\\Installers\\BaseInstaller' not found in wp-content/plugins/login-with-meveto-oauth-client/vendor/composer/installers/src/Composer/Installers/JoomlaInstaller.php:4
    • > PHP Notice
      Constant SODIUM_CRYPTO_SHORTHASH_KEYBYTES already defined in wp-content/plugins/login-with-meveto-oauth-client/vendor/paragonie/sodium_compat/lib/php72compat_const.php on line 72
    • > PHP Fatal error
      Uncaught Error: Class 'Composer\\Installers\\BaseInstaller' not found in wp-content/plugins/login-with-meveto-oauth-client/vendor/composer/installers/src/Composer/Installers/KirbyInstaller.php:4
    • > PHP Notice
      Constant SODIUM_CRYPTO_SECRETBOX_KEYBYTES already defined in wp-content/plugins/login-with-meveto-oauth-client/vendor/paragonie/sodium_compat/lib/php72compat_const.php on line 73
    • > PHP Fatal error
      require_once(): Failed opening required 'wp-content/plugins/login-with-meveto-oauth-client/vendor/paragonie/sodium_compat/vendor/autoload.php' (include_path='.:/usr/share/php') in wp-content/plugins/login-with-meveto-oauth-client/vendor/paragonie/sodium_compat/autoload-phpunit.php on line 3
    • > PHP Notice
      Constant SODIUM_CRYPTO_AEAD_CHACHA20POLY1305_IETF_ABYTES already defined in wp-content/plugins/login-with-meveto-oauth-client/vendor/paragonie/sodium_compat/lib/php72compat_const.php on line 22

User-side errors Passed 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the browser (console and network errors and warnings)
No browser errors were detected

Optimizations

Plugin configuration 96% from 29 tests

readme.txt Passed 16 tests

Often overlooked, readme.txt is one of the most important files in your plugin
4 plugin tags: meveto, password-less, access-management, authentication

login-with-meveto-oauth-client/meveto-login.php 92% from 13 tests

This is the main PHP file of "Meveto" version 3.0.2, providing information about the plugin in the header fields and serving as the principal entry point to the plugin's functions
Please take the time to fix the following:
  • Main file name: Please rename the main PHP file in this plugin to the plugin slug ("login-with-meveto-oauth-client.php" instead of "meveto-login.php")

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | This is an overview of file extensions present in this plugin and a short test that no dangerous files are bundled with this plugin
No dangerous file extensions were detected39,469 lines of code in 411 files:
LanguageFilesBlank linesComment linesLines of code
PHP3535,33518,10433,434
Markdown171,31703,869
JSON16001,561
YAML4323143
Bourne Shell42812140
CSS5014135
XML61542120
make213435
JavaScript301531
INI1001

PHP code Passed 2 tests

An overview of cyclomatic complexity and code structure
There are no cyclomatic complexity problems detected for this plugin
Cyclomatic complexity
Average complexity per logical line of code0.24
Average class complexity9.82
▷ Minimum class complexity1.00
▷ Maximum class complexity330.00
Average method complexity2.79
▷ Minimum method complexity1.00
▷ Maximum method complexity25.00
Code structure
Namespaces31
Interfaces22
Traits5
Classes292
▷ Abstract classes248.22%
▷ Concrete classes26891.78%
▷ Final classes207.46%
Methods1,610
▷ Static methods63139.19%
▷ Public methods1,39286.46%
▷ Protected methods804.97%
▷ Private methods1388.57%
Functions307
▷ Named functions20867.75%
▷ Anonymous functions9932.25%
Constants373
▷ Global constants30.80%
▷ Class constants37099.20%
▷ Public constants370100.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

All PNG images should be compressed to minimize bandwidth usage for end users
No PNG files were detected