johndoh/globaladdressbook
It includes clear installation guidance, a changelog, and a stable 2.1 release. The linked project is small and has no security policy, while recent repository commit activity is absent; pin this version and verify Roundcube compatibility.
62%
Total Score
50
86
75
Health Score Breakdown
The package has 9 releases but none in the last 12 months, and its latest registry release was in June 2022. This indicates meaningful release stagnation despite its earlier regular cadence.
There were no commits and no active maintainers in the last 3 months. This weakens evidence of ongoing maintenance and compounds the stale registry release history.
The repository uses Composer, providing basic build tooling, but no security scanning tools were detected. That is a modest transparency and hygiene gap for a dependency.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Philip Weir |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 roundcube/plugin-installer Version >=0.1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.