New Plugin: AC³ - Advanced Code & Compliance Checker

I have a new plugin I will be releasing here for public usage in a few day. I will not be releasing it in their repository because unfortunately once I do, they can freely use/steal it and repackage as their own like they did with ACF (Advanced Custom Fields) or to copy/paste into their own version they have already.

This is spawned by my interactions with Wordpress, the things I missed, the things they missed, and a lot more during the submission process with my Linked Terms plugin. I have been working on this plugin for a few months doing testing and have some to a good point. There's a lot under the hood and A LOT more planned that will allow this plugin to pull from an external json file hosted at github so it's constantly up to date on it various check types libraries and as WP updates their compliance requirements.

This thing is a beast and is for INFORMATIONAL PURPOSES only. It also does checks for instances where coders intentionally wrap code in an a PHPCS:Ignore or other coding bypass methods. Sometimes this is legit ignore or bypass because other safeguards are in place and the scan flag would essentially be a false positive... however other instances are examples of blatant abuse by a coder to intentionally bypass scanners so their code looks good/safe but really isn't.

I'll admit I've been guilty of this as well to get a plugin working for testing but typically I go back to fix them before a production release. When I do have to use an ignore, I add comments explaining why I used it and the safeguards I have in place.

I'm going to do some more tuning, but the results so far are pretty astounding and alarming. I will continue to improve this, but several plugins if not most, have some serious issues that could be exploited and easily fixed.... and yes, this plugin even gives suggestions on how to fix the issues it detects.