Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/erfindergeistjuelichofficial/backup-wp-plugin/archive/refs/heads/main.zipNo built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Erfindergeist Backup — Local Analysis
Run all checks locally before making a commit.
Prerequisites
Podman or Docker (no local PHP required).
Setup
The included compose.yml + Dockerfile build a container with PHP 8.3 + Composer.
Build the image once, it will be cached afterwards:
podman compose buildThen install dependencies:
# Development (incl. analysis tools):
podman compose run --rm composer install
# Production (runtime dependencies only):
podman compose run --rm composer install --no-dev --optimize-autoloaderIndividual Checks
| Command | Podman equivalent | Checks |
|---|---|---|
composer phpcs |
podman compose run --rm composer phpcs |
Code style (WordPress Coding Standards + PHP compatibility) |
composer phpstan |
podman compose run --rm composer phpstan |
Static analysis — types, undefined variables, logic errors |
composer psalm |
podman compose run --rm composer psalm |
Security — taint analysis (XSS, SQL injection, path traversal) |
composer phpmd |
podman compose run --rm composer phpmd |
Code quality — complexity, naming, unused code |
composer audit |
podman compose run --rm composer audit |
Known CVEs in dependencies |
All Checks at Once
podman compose run --rm composer analyseRuns phpcs → phpstan → psalm → phpmd sequentially.
Run composer audit separately afterwards.
CI/CD
The GitHub Actions pipeline (.github/workflows/backup-plugin.yml) triggers automatically on:
- every push or pull request with changes to the plugin
- every Monday at 06:00 UTC (to catch newly published CVEs)
The pipeline tests on PHP 8.3 and 8.4 in parallel.