Read-only Odoo address book: suggests the Odoo contacts in the recipient autocompletion and lists them in the Contacts screen
82%
Total Score
healthy
A one-day-old package has four stable releases and matching source, but no security policy or demonstrated commit history.
The registry namespace and repository owner are both CymDeveloppement, and the repository owner is an individual account. This is consistent ownership context but does not provide organizational redundancy.
The package is only 1 day old, with 4 releases in that period and a median interval of about 7 hours. This shows active initial publishing but provides little long-term maintenance evidence.
The repository reports 0 commits and 0 active maintainers over the last 3 months. Because the package is only 1 day old, this is limited evidence rather than proof of abandonment, but it leaves maintenance capacity undemonstrated.
The repository has no security policy. This is a modest transparency gap for a package that connects Roundcube to an external Odoo service, though it is not severe on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
roundcube/plugin-installer Version >=0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.