84% securityscorecard-seal-of-trust-badge

Code Review | SecurityScorecard Seal of Trust Badge

WordPress plugin SecurityScorecard Seal of Trust Badge scored 84% from 54 tests.

About plugin

  • Plugin page: securityscorecard...
  • Plugin version: 1.1
  • PHP version: 7.4.16
  • WordPress compatibility: 4.7-5.9
  • WordPress version: 6.3.1
  • First release: Mar 22, 2022
  • Latest release: Mar 28, 2022
  • Number of updates: 25
  • Update frequency: every 0.2 days
  • Top authors: securityscorecard (100%)

Code review

54 tests

User reviews

1 review

Install metrics

30+ active / 332 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | All plugins must install correctly, without throwing any errors, warnings, or notices
Install script ran successfully

Server metrics [RAM: ▲0.04MB] [CPU: ▼2.68ms] Passed 4 tests

This is a short check of server-side resources used by SecurityScorecard Seal of Trust Badge
This plugin does not affect your website's performance
PageMemory (MB)CPU Time (ms)
Home /3.50 ▲0.0437.63 ▼5.51
Dashboard /wp-admin3.34 ▲0.0448.35 ▲1.03
Posts /wp-admin/edit.php3.40 ▲0.0450.10 ▲1.68
Add New Post /wp-admin/post-new.php5.93 ▲0.0490.41 ▼7.91
Media Library /wp-admin/upload.php3.27 ▲0.0438.47 ▲3.02

Server storage [IO: ▲0.01MB] [DB: ▲0.00MB] Passed 3 tests

A short overview of filesystem and database impact
The plugin installed successfully
Filesystem: 2 new files
Database: no new tables, 7 new options
New WordPress options
widget_theysaidso_widget
widget_securityscorecardsea_widget
theysaidso_admin_options
db_upgraded
can_compress_scripts
widget_recent-posts
widget_recent-comments

Browser metrics Passed 4 tests

A check of browser resources used by SecurityScorecard Seal of Trust Badge
Minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,800 ▲6513.35 ▼1.061.75 ▼0.3639.47 ▼10.05
Dashboard /wp-admin2,206 ▲184.87 ▼0.99115.84 ▲5.0143.18 ▼0.20
Posts /wp-admin/edit.php2,089 ▼31.99 ▼0.0642.31 ▲1.0734.75 ▲0.16
Add New Post /wp-admin/post-new.php1,514 ▼2817.45 ▼0.78669.76 ▲54.2451.29 ▼7.44
Media Library /wp-admin/upload.php1,388 ▼04.20 ▼0.03106.99 ▲1.6844.80 ▲1.09

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | Verifying that this plugin uninstalls completely without leaving any traces
Please fix the following items
  • Zombie WordPress options detected upon uninstall: 7 options
    • can_compress_scripts
    • widget_recent-comments
    • theysaidso_admin_options
    • widget_theysaidso_widget
    • widget_securityscorecardsea_widget
    • widget_recent-posts
    • db_upgraded

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no server-side errors were triggered
Everything seems fine, however this is by no means an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | It is important to ensure that your PHP files perform no action when accessed directly, respecting the single-responsibility principle
The following issues need your attention
  • 1× PHP files trigger errors when accessed directly with GET requests:
    • > PHP Fatal error
      Uncaught Error: Class 'WP_Widget' not found in wp-content/plugins/securityscorecard-seal-of-trust-badge/ssc-wordpress.php:13

User-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no browser errors were triggered
No browser issues were found

Optimizations

Plugin configuration 96% from 29 tests

readme.txt Passed 16 tests

Don't ignore readme.txt as it is the file that instructs WordPress.org on how to present your plugin to the world
4 plugin tags: security, secure, badge, badges

securityscorecard-seal-of-trust-badge/ssc-wordpress.php 92% from 13 tests

Analyzing the main PHP file in "SecurityScorecard Seal of Trust Badge" version 1.1
Please take the time to fix the following:
  • Main file name: It is recommended to name the main PHP file as the plugin slug ("securityscorecard-seal-of-trust-badge.php" instead of "ssc-wordpress.php")

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | This is a short overview of programming languages used in this plugin, detecting executable files
Good job! No executable or dangerous file extensions detected206 lines of code in 1 file:
LanguageFilesBlank linesComment linesLines of code
PHP12810206

PHP code Passed 2 tests

An short overview of logical lines of code, cyclomatic complexity, and other code metrics
This plugin has no cyclomatic complexity issues
Cyclomatic complexity
Average complexity per logical line of code0.28
Average class complexity8.00
▷ Minimum class complexity8.00
▷ Maximum class complexity8.00
Average method complexity2.40
▷ Minimum method complexity1.00
▷ Maximum method complexity5.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes1
▷ Abstract classes00.00%
▷ Concrete classes1100.00%
▷ Final classes00.00%
Methods5
▷ Static methods00.00%
▷ Public methods5100.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions3
▷ Named functions3100.00%
▷ Anonymous functions00.00%
Constants0
▷ Global constants00.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

PNG files should be compressed to save space and minimize bandwidth usage
There are no PNG files in this plugin