roundcube/plugin-installer

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and long project history partly compensate, but the current pause lowers maintenance confidence.

Repo issue activitycaution

There are four open issues and one open pull request, but no issues or pull requests were opened or closed in the last month. This is a mild sign of limited current activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. For a package that installs plugins and skins, the missing reporting guidance is a meaningful transparency gap.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no high- or medium-confidence findings; however, all six action references are unpinned, leaving workflow dependencies exposed to reference changes.