The package has clear documentation, a changelog, release notes, and a small dependency footprint. Oversight is limited by one registry maintainer, no security policy, and no commits in the last three months.
64%
Total Score
50
100
86
75
Only one registry account has publish access. That is a limited maintainer base for continuity, though the linked repository is consistently owned by the same individual.
The package has six releases over about six years, with one release in the last 12 months; the latest release provides some evidence of continued maintenance, but the roughly yearly cadence is modest.
There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern, although the package had a release within the last year.
Composer is used for builds, but no security-scanning tooling is present; this is a modest transparency and maintenance gap rather than evidence of an unsafe release.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
roundcube/plugin-installer Version ~0.3.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.