[HumanSlop] Code Quality Audit: 24574 findings in BackWPup – WordPress Backup & Restore Plugin
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 95
- Forks
- 46
- PR merge metrics
- No merged PRs in 30d
Description
HumanSlop Automated Code Quality Audit
We've completed an automated audit of BackWPup – WordPress Backup & Restore Plugin v5.6.9 as part of
HumanSlop.org — an open accountability project for the WordPress ecosystem.
Full audit report: https://humanslop.org/audits/backwpup/
Summary: 24574 code quality issues found
PHP_CodeSniffer (24572 issues)
We found 24572 PHP_CodeSniffer violations against the WordPress Coding Standards. To reproduce:
composer require --dev squizlabs/php_codesniffer wp-coding-standards/wpcs
./vendor/bin/phpcs --standard=WordPress backwpup/
Full details are on the audit report page.
Other Code Quality Issues
| Severity | Issue | Location | Tool |
|---|---|---|---|
| Info | Backup table row HTML buffered and echoed without explicit escaping (false positive) | components/table-row-backups.php:339 |
ai |
| Info | Edit job page outputs WordPress checkbox HTML without explicit esc_ wrapper | inc/class-page-editjob.php:872 |
ai |
Note: Security-related findings are reported privately via GitHub Security Advisory.
This issue only contains non-security code quality findings.
To dispute a finding or notify us of a fix, please reply here or email contact@humanslop.org.
See our methodology and disclosure policy.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the audit report and reproducing the findings with the provided PHP_CodeSniffer commands against backwpup/. Inspect components/table-row-backups.php:339 and inc/class-page-editjob.php:872 for the two additional findings. The scope is not bounded: completion would require deciding which of 24,574 findings are valid and resolving the applicable issues.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- backend
- Issue type
- Refactor
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100