Virgil opened issue core/php-plug-business#1

Virgil
Sun, 22 Mar 2026 16:41:30 +0000

1#[audit] Security, API safety, missing tests, error handling#

Full audit:

1. Security: API key exposure, OAuth token handling, webhook validation, input sanitisation

2. Rate limiting: proper backoff, quota tracking, retry logic

3. Missing tests: provider actions without Pest coverage

4. Error handling: swallowed API errors, missing HTTP status checks, timeout handling

5. UK English: American spellings in code/comments

6. Coding standards: strict_types, type hints, Action pattern, SPDX headers

Report all findings with severity and file:line. Do NOT fix.