As theplugin developer, we should try to make our code more standardized and safe. However, in some cases, we may not be aware of some security vulnerabilities in our plugins, or use some deprecated, unsafe WordPress functions. I found using Plugin Inspector to check your plugin is a good choice for the developers.
Introduction to Plugin Inspector
Plugin Inspector plugin uses an easy way to check your installed WordPress plugin for deprecated WordPress functions, as well as unsafe functions like eval, base64_decode, system, exec, etc. Some of these functions can load malware directly from an external source into your website or WordPress database.
Features to Plugin Inspector
Scans plugins for deprecated WordPress functions
Scans plugins for unsafe functions like eval, base64_decode, system, exec, etc.
Checks plugins to find vulnerabilities listed in WPScan Vulnerability Database
Beautiful source code viewer with highlighting
Download and Install Plugin Inspector
You can instal Plugin Inspector online by searching Plugin Inspector in the backend, or here to download Plugin Inspector, actived, enters the plugin setting page.