Making WordPress.org

Opened 27 hours ago

#8018 new enhancement

Replace WP Scanner for Plugin Check Plugin

Reported by: davidperez's profile davidperez Owned by:
Milestone: Priority: high
Component: Plugin Directory Keywords:
Cc:

Description

We are currently running a plugin scanner using the WPORG Code Analysis tool:
https://github.com/wordpress/wporg-code-analysis

The Plugins Team has been working on the Plugin Check Plugin (PCP), and we’re continuously refining it. The tool supports severity levels, which allows us to block a plugin from being approved when we’re confident the issues are not false positives.

My proposal is to replace the current plugin with PCP in update mode.
This will add checks not only related to security, but also to readme standards and WPCS compliance, including deprecated functions.

Finally, I believe we should send the scanner report to plugin authors so they can proactively improve their plugins. Once this change is implemented, we could move forward with the notification system already proposed here: https://meta.trac.wordpress.org/ticket/5637

Change History (0)

Note: See TracTickets for help on using tickets.