wp-media / wp-media/backwpup

[HumanSlop] Code Quality Audit: 24574 findings in BackWPup – WordPress Backup & Restore Plugin

Open
#237 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
95
Forks
46
PR merge metrics
No merged PRs in 30d

Description

HumanSlop Automated Code Quality Audit

We've completed an automated audit of BackWPup – WordPress Backup & Restore Plugin v5.6.9 as part of
HumanSlop.org — an open accountability project for the WordPress ecosystem.

Full audit report: https://humanslop.org/audits/backwpup/

Summary: 24574 code quality issues found
PHP_CodeSniffer (24572 issues)

We found 24572 PHP_CodeSniffer violations against the WordPress Coding Standards. To reproduce:

composer require --dev squizlabs/php_codesniffer wp-coding-standards/wpcs
./vendor/bin/phpcs --standard=WordPress backwpup/

Full details are on the audit report page.

Other Code Quality Issues
Severity Issue Location Tool
Info Backup table row HTML buffered and echoed without explicit escaping (false positive) components/table-row-backups.php:339 ai
Info Edit job page outputs WordPress checkbox HTML without explicit esc_ wrapper inc/class-page-editjob.php:872 ai

Note: Security-related findings are reported privately via GitHub Security Advisory.
This issue only contains non-security code quality findings.

To dispute a finding or notify us of a fix, please reply here or email contact@humanslop.org.

See our methodology and disclosure policy.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the audit report and reproducing the findings with the provided PHP_CodeSniffer commands against backwpup/. Inspect components/table-row-backups.php:339 and inc/class-page-editjob.php:872 for the two additional findings. The scope is not bounded: completion would require deciding which of 24,574 findings are valid and resolving the applicable issues.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
backend
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.