84% passwordless-wp

Code Review | Passwordless WP - Login with your glance or fingerprint

WordPress plugin Passwordless WP - Login with your glance or fingerprint scored84%from 54 tests.

About plugin

  • Plugin page: passwordless-wp
  • Plugin version: 1.1.6
  • PHP compatiblity: 7.2+
  • PHP version: 7.4.16
  • WordPress compatibility: 5.4-5.5.1
  • WordPress version: 6.3.1
  • First release: Oct 20, 2020
  • Latest release: Oct 29, 2020
  • Number of updates: 5
  • Update frequency: every 3.0 days
  • Top authors: wpbusters (100%)

Code review

54 tests

User reviews

3 reviews

Install metrics

100+ active /2,799 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | All plugins must install correctly, without throwing any errors, warnings, or notices
The plugin installed gracefully, with no errors

Server metrics [RAM: ▲0.46MB] [CPU: ▼1.46ms] Passed 4 tests

A check of server-side resources used by Passwordless WP - Login with your glance or fingerprint
Normal server usage
PageMemory (MB)CPU Time (ms)
Home /3.96 ▲0.4942.90 ▲2.42
Dashboard /wp-admin3.79 ▲0.4951.74 ▲3.75
Posts /wp-admin/edit.php3.84 ▲0.4955.01 ▲4.53
Add New Post /wp-admin/post-new.php6.31 ▲0.4387.80 ▼16.30
Media Library /wp-admin/upload.php3.65 ▲0.4242.04 ▲4.28

Server storage [IO: ▲3.10MB] [DB: ▲0.00MB] Passed 3 tests

Analyzing filesystem and database footprints of this plugin
This plugin was installed successfully
Filesystem: 790 new files
Database: 1 new table, 6 new options
New tables
wp_passwordlesswp_registered_creds
New WordPress options
widget_theysaidso_widget
can_compress_scripts
db_upgraded
theysaidso_admin_options
widget_recent-comments
widget_recent-posts

Browser metrics Passed 4 tests

Checking browser requirements for Passwordless WP - Login with your glance or fingerprint
Normal browser usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,842 ▲8114.39 ▼0.341.72 ▼0.1433.79 ▼12.80
Dashboard /wp-admin2,198 ▲185.63 ▲0.0692.23 ▲1.7039.99 ▼6.57
Posts /wp-admin/edit.php2,100 ▼02.03 ▲0.0138.87 ▲3.9738.59 ▲1.73
Add New Post /wp-admin/post-new.php1,526 ▼223.26 ▲0.35701.33 ▲94.1349.13 ▲1.51
Media Library /wp-admin/upload.php1,403 ▲64.10 ▼0.11101.79 ▼4.3742.51 ▲0.02

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
These items require your attention
  • This plugin did not uninstall successfully, leaving 6 options in the database
    • db_upgraded
    • widget_recent-comments
    • widget_recent-posts
    • theysaidso_admin_options
    • widget_theysaidso_widget
    • can_compress_scripts

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A smoke test targeting server-side errors
Even though no errors were found, this is by no means an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | A shallow check of the single-responsibility principle; PHP files should perform no action - including output of placeholder text - and trigger no errors when accessed directly
The following issues need your attention
  • 415× PHP files trigger errors when accessed directly with GET requests (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Interface 'Symfony\\Component\\Process\\Exception\\ExceptionInterface' not found in wp-content/plugins/passwordless-wp/vendor/symfony/process/Exception/InvalidArgumentException.php:19
    • > PHP Fatal error
      Uncaught Error: Interface 'Symfony\\Component\\VarDumper\\Dumper\\ContextProvider\\ContextProviderInterface' not found in wp-content/plugins/passwordless-wp/vendor/symfony/var-dumper/Dumper/ContextProvider/RequestContextProvider.php:23
    • > PHP Fatal error
      Uncaught Error: Interface 'League\\Uri\\Contracts\\UriComponentInterface' not found in wp-content/plugins/passwordless-wp/vendor/league/uri-interfaces/src/Contracts/AuthorityInterface.php:19
    • > PHP Fatal error
      Uncaught Error: Interface 'Ramsey\\Uuid\\Validator\\ValidatorInterface' not found in wp-content/plugins/passwordless-wp/vendor/ramsey/uuid/src/Validator/GenericValidator.php:27
    • > PHP Fatal error
      Uncaught Error: Class 'League\\Uri\\Components\\Component' not found in wp-content/plugins/passwordless-wp/vendor/league/uri-components/src/Components/HierarchicalPath.php:51
    • > PHP Fatal error
      Uncaught Error: Interface 'League\\Uri\\Contracts\\UriException' not found in wp-content/plugins/passwordless-wp/vendor/league/uri-components/src/Exceptions/IPv4CalculatorMissing.php:24
    • > PHP Fatal error
      Uncaught Error: Class 'Webauthn\\Credential' not found in wp-content/plugins/passwordless-wp/vendor/web-auth/webauthn-lib/src/PublicKeyCredential.php:21
    • > PHP Fatal error
      Uncaught Error: Interface 'Webauthn\\AttestationStatement\\AttestationStatementSupport' not found in wp-content/plugins/passwordless-wp/vendor/web-auth/webauthn-lib/src/AttestationStatement/FidoU2FAttestationStatementSupport.php:29
    • > PHP Fatal error
      Uncaught Error: Class 'Composer\\Installers\\BaseInstaller' not found in wp-content/plugins/passwordless-wp/vendor/composer/installers/src/Composer/Installers/MakoInstaller.php:4
    • > PHP Fatal error
      Uncaught Error: Class 'Composer\\Installers\\BaseInstaller' not found in wp-content/plugins/passwordless-wp/vendor/composer/installers/src/Composer/Installers/ModxInstaller.php:7

User-side errors Passed 1 test

🔹 Test weight: 20 | This is just a short smoke test looking for browser issues
Everything seems fine on the user side

Optimizations

Plugin configuration 96% from 29 tests

readme.txt Passed 16 tests

It's important to format your readme.txt file correctly as it is parsed for the public listing of your plugin
5 plugin tags: access, protection, security, authentication, login

passwordless-wp/passwordless-wp.php 92% from 13 tests

"Passwordless WP - Login with your glance or fingerprint" version 1.1.6's primary PHP file adds more information about the plugin and serves as the entry point for WordPress
You should first fix the following items:
  • Description: Please keep the plugin description shorter than 140 characters (currently 150 characters long)

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are considered dangerous and should not be included with any WordPress plugin
Everything looks great! No dangerous files found in this plugin48,821 lines of code in 748 files:
LanguageFilesBlank linesComment linesLines of code
PHP67610,24822,53242,820
JSON29103,300
Markdown321,15302,464
CSS300132
XML211184
JavaScript40013
YAML2118

PHP code Passed 2 tests

An overview of cyclomatic complexity and code structure
No complexity issues detected
Cyclomatic complexity
Average complexity per logical line of code0.36
Average class complexity7.88
▷ Minimum class complexity1.00
▷ Maximum class complexity210.00
Average method complexity2.43
▷ Minimum method complexity1.00
▷ Maximum method complexity64.00
Code structure
Namespaces90
Interfaces89
Traits14
Classes547
▷ Abstract classes397.13%
▷ Concrete classes50892.87%
▷ Final classes13626.77%
Methods3,411
▷ Static methods74621.87%
▷ Public methods2,91485.43%
▷ Protected methods1795.25%
▷ Private methods3189.32%
Functions204
▷ Named functions11254.90%
▷ Anonymous functions9245.10%
Constants716
▷ Global constants91.26%
▷ Class constants70798.74%
▷ Public constants57581.33%

Plugin size Passed 2 tests

Image compression Passed 2 tests

PNG files should be compressed to save space and minimize bandwidth usage
5 PNG files occupy 0.48MB with 0.35MB in potential savings
Potential savings
Compression of 5 random PNG files using pngquant
FileSize - originalSize - compressedSavings
assets/screenshot-2.png191.29KB33.65KB▼ 82.41%
assets/screenshot-3.png86.02KB15.03KB▼ 82.53%
assets/banner-772x250.png20.95KB8.69KB▼ 58.53%
assets/screenshot-1.png176.75KB32.54KB▼ 81.59%
assets/icon-256x256.png14.75KB5.92KB▼ 59.87%