62% password-vault

Code Review | Password Vault

WordPress plugin Password Vault scored62%from 54 tests.

About plugin

  • Plugin page: password-vault
  • Plugin version: 1.8.3
  • PHP version: 7.4.16
  • WordPress compatibility: 3.0.1-4.9.5
  • WordPress version: 6.3.1
  • First release: May 25, 2014
  • Latest release: Dec 16, 2018
  • Number of updates: 37
  • Update frequency: every 45.0 days
  • Top authors: mrdenny (100%)

Code review

54 tests

User reviews

1 review

Install metrics

10+ active /2,101 total downloads

Benchmarks

Plugin footprint 65% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | The install procedure must perform silently
Install script ran successfully

Server metrics [RAM: ▲0.03MB] [CPU: ▼4.42ms] Passed 4 tests

Analyzing server-side resources used by Password Vault
This plugin does not affect your website's performance
PageMemory (MB)CPU Time (ms)
Home /3.48 ▲0.0245.91 ▼0.65
Dashboard /wp-admin3.34 ▲0.0457.15 ▲4.81
Posts /wp-admin/edit.php3.39 ▲0.0467.98 ▲15.48
Add New Post /wp-admin/post-new.php5.92 ▲0.0490.79 ▼20.57
Media Library /wp-admin/upload.php3.26 ▲0.0436.96 ▼1.26
Password Vault Settings /wp-admin/admin.php?page=password_vault_settings3.2031.85
Password Vault /wp-admin/admin.php?page=password_vault3.2031.20

Server storage [IO: ▲0.17MB] [DB: ▲0.01MB] Passed 3 tests

How much does this plugin use your filesystem and database?
No storage issues were detected
Filesystem: 15 new files
Database: 7 new tables, 7 new options
New tables
wp_password_vault_group_users
wp_password_vault_audit
wp_password_vault_deleted
wp_password_vault_user_permissions
wp_password_vault_group_permissions
wp_password_vault_groups
wp_password_vault_vault
New WordPress options
can_compress_scripts
password_vault
widget_theysaidso_widget
theysaidso_admin_options
widget_recent-comments
db_upgraded
widget_recent-posts

Browser metrics Passed 4 tests

Checking browser requirements for Password Vault
This plugin renders optimally with no browser resource issues detected
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,826 ▲8013.20 ▼1.251.90 ▼0.1244.28 ▼0.61
Dashboard /wp-admin2,235 ▲475.82 ▼0.03104.19 ▼6.5968.23 ▲22.42
Posts /wp-admin/edit.php2,124 ▲352.02 ▲0.0144.84 ▲8.2447.69 ▲12.56
Add New Post /wp-admin/post-new.php1,550 ▲3623.24 ▲5.61769.21 ▲80.2757.38 ▼2.35
Media Library /wp-admin/upload.php1,408 ▲204.24 ▲0.04108.94 ▲4.4171.02 ▲25.44
Password Vault Settings /wp-admin/admin.php?page=password_vault_settings9582.0624.8228.06
Password Vault /wp-admin/admin.php?page=password_vault8152.0225.1126.39

Uninstaller [IO: ▲0.00MB] [DB: ▲0.01MB] 50% from 4 tests

🔸 Tests weight: 35 | Verifying that this plugin uninstalls completely without leaving any traces
Please fix the following items
  • The plugin did not uninstall successfully, leaving 7 tables in the database
    • wp_password_vault_deleted
    • wp_password_vault_group_users
    • wp_password_vault_user_permissions
    • wp_password_vault_audit
    • wp_password_vault_group_permissions
    • wp_password_vault_vault
    • wp_password_vault_groups
  • The uninstall procedure has failed, leaving 7 options in the database
    • widget_theysaidso_widget
    • theysaidso_admin_options
    • widget_recent-posts
    • can_compress_scripts
    • widget_recent-comments
    • db_upgraded
    • password_vault

Smoke tests 25% from 4 tests

Server-side errors 0% from 1 test

🔹 Test weight: 20 | A shallow check that no server-side errors were triggered
Please fix the following server-side errors
  • 2 occurences, only the last one shown
    • > GET request to /wp-admin/admin.php?page=password_vault_settings
    • > Notice in wp-content/plugins/password-vault/settings.php+213
    Undefined index: oldkey
  • 4 occurences, only the last one shown
    • > GET request to /wp-admin/admin.php?page=password_vault
    • > Notice in wp-content/plugins/password-vault/tools.php+65
    Undefined index: action
    • > GET request to /wp-admin/admin.php?page=password_vault
    • > Notice in wp-content/plugins/password-vault/tools.php+69
    Undefined variable: action
    • > GET request to /wp-admin/admin.php?page=password_vault
    • > Notice in wp-content/plugins/password-vault/tools.php+377
    Undefined index: username
    • > GET request to /wp-admin/admin.php?page=password_vault
    • > Notice in wp-content/plugins/password-vault/tools.php+83
    Undefined index: sub_action

SRP 0% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
The following issues need your attention
  • 1× GET requests to PHP files return non-empty strings:
    • > /wp-content/plugins/password-vault/hosting.php
  • 1× PHP files trigger errors when accessed directly with GET requests:
    • > PHP Fatal error
      Uncaught Error: Call to undefined function register_activation_hook() in wp-content/plugins/password-vault/password-vault.php:200

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for browser errors
No browser issues were found

Optimizations

Plugin configuration 93% from 29 tests

readme.txt 94% from 16 tests

The readme.txt file is an important file in your plugin as it is parsed by WordPress.org to prepare the public listing of your plugin
Please fix the following attributes:
  • Tags: Too many tags (13 tag instead of maximum 10); only the first 5 tags are used in your directory listing
You can look at the official readme.txt

password-vault/password-vault.php 92% from 13 tests

"Password Vault" version 1.8.3's primary PHP file adds more information about the plugin and serves as the entry point for WordPress
It is important to fix the following:
  • Description: Please keep the plugin description shorter than 140 characters (currently 183 characters long)

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are considered dangerous and should not be included with any WordPress plugin
Everything looks great! No dangerous files found in this plugin1,654 lines of code in 7 files:
LanguageFilesBlank linesComment linesLines of code
PHP7384621,654

PHP code Passed 2 tests

Cyclomatic complexity and code structure are the fingerprint of this plugin
There are no cyclomatic complexity problems detected for this plugin
Cyclomatic complexity
Average complexity per logical line of code0.36
Average class complexity52.80
▷ Minimum class complexity3.00
▷ Maximum class complexity175.00
Average method complexity4.41
▷ Minimum method complexity1.00
▷ Maximum method complexity36.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes5
▷ Abstract classes00.00%
▷ Concrete classes5100.00%
▷ Final classes00.00%
Methods76
▷ Static methods00.00%
▷ Public methods76100.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions0
▷ Named functions00.00%
▷ Anonymous functions00.00%
Constants0
▷ Global constants00.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

All PNG images should be compressed to minimize bandwidth usage for end users
6 PNG files occupy 0.04MB with 0.03MB in potential savings
Potential savings
Compression of 5 random PNG files using pngquant
FileSize - originalSize - compressedSavings
check.png15.96KB6.55KB▼ 58.94%
x.png9.50KB4.78KB▼ 49.67%
icon-old.png2.79KB0.17KB▼ 93.97%
icon.png0.68KB0.22KB▼ 66.96%
archive.png11.23KB5.39KB▼ 51.95%