"Keep me logged in" for Roundcube: longer sessions only for browsers you choose, with encrypted tokens and a Remembered devices page
58%
Total Score
caution
A brand-new release with no observed commit activity has useful tests and documentation, but its maintenance track record is unproven.
One registry maintainer is consistent with an individual-owned project, but it leaves little visible redundancy if that maintainer becomes unavailable.
The package is brand new, with only two releases published within about 23 minutes, so there is not yet enough history to demonstrate dependable maintenance.
The repository recorded zero commits and zero active maintainers over the last three months. Because the project is newly published, this indicates unproven maintenance capacity rather than clear abandonment.
Composer is used for builds, but no security scanning tools were detected. That is a modest transparency gap for a plugin handling login credentials, not evidence of unsafe code by itself.
Version v0.1.1 is not a prerelease, but the package remains below a stable major version and has almost no release history to establish compatibility expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
roundcube/plugin-installer Version ~0.3.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.