- phpcs-scan.sh: WordPress-Extra 标准扫描,提取安全发现输出 JSON - 报告生成器集成 PHPCS 维度(高危: SQL注入/CSRF, 中危: 输出未转义) - acceptance-criteria.json 新增 phpcs 阈值,整体门槛调整为 8/10 - Justfile 新增 phpcs-scan 独立任务,test-plugin 流程自动集成 - plugin-check.sh: PCP 自动化脚本(Playground 集成,待完善) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
51 lines
1.8 KiB
JSON
51 lines
1.8 KiB
JSON
{
|
|
"_comment": "验收标准量化基线 — 各维度 pass/warn/fail 阈值",
|
|
"_updated": "2026-02-19",
|
|
|
|
"lighthouse": {
|
|
"performance": { "pass": 80, "warn": 60, "description": "性能评分" },
|
|
"accessibility": { "pass": 90, "warn": 70, "description": "无障碍评分" },
|
|
"bestPractices": { "pass": 90, "warn": 75, "description": "最佳实践评分" },
|
|
"seo": { "pass": 85, "warn": 70, "description": "SEO 评分" }
|
|
},
|
|
|
|
"security": {
|
|
"high": { "pass": 0, "warn": 0, "description": "高危漏洞数 (0=pass, >0=fail)" },
|
|
"medium": { "pass": 0, "warn": 2, "description": "中危漏洞数" },
|
|
"low": { "pass": 3, "warn": 5, "description": "低危漏洞数" },
|
|
"knownWpCoreLeaks": ["readme.html", "xmlrpc", "debug.log"],
|
|
"_leakNote": "WordPress 核心已知信息泄露,不计入插件安全评分"
|
|
},
|
|
|
|
"accessibility": {
|
|
"violations": { "pass": 0, "warn": 3, "description": "axe 违规数" }
|
|
},
|
|
|
|
"html": {
|
|
"errors": { "pass": 0, "warn": 5, "description": "HTML 验证错误数" }
|
|
},
|
|
|
|
"links": {
|
|
"broken": { "pass": 0, "warn": 2, "description": "断链数" }
|
|
},
|
|
|
|
"i18n": {
|
|
"coverage": { "pass": 95, "warn": 80, "description": "翻译覆盖率 (%)" },
|
|
"overflow": { "pass": 0, "warn": 3, "description": "文本溢出元素数" },
|
|
"potFile": { "pass": true, "description": "zip 中必须包含 .pot 文件" }
|
|
},
|
|
|
|
"visualRegression": {
|
|
"diffPercent": { "pass": 0.5, "warn": 2.0, "description": "视觉差异百分比" }
|
|
},
|
|
|
|
"phpcs": {
|
|
"high": { "pass": 0, "warn": 0, "description": "高危 (SQL注入/CSRF, 0=pass, >0=fail)" },
|
|
"medium": { "pass": 5, "warn": 10, "description": "中危 (输出未转义)" }
|
|
},
|
|
|
|
"overall": {
|
|
"passThreshold": 8,
|
|
"description": "10 维度中至少 N 个通过才算整体通过"
|
|
}
|
|
}
|