syncgw/roundcube_plugin

Licensecaution

The package declares LGPL-3.0-or-later and includes a license file, but the detected artifact license is GPL-3.0, so the declared and detected licensing information does not fully align.

Project backingcaution

The registry namespace and repository owner match, and the repository owner is an individual account rather than an organization. This offers direct ownership alignment but limited institutional backing.

Repo popularitycaution

The repository has one star, no forks, and one watcher. Popularity is only supporting evidence, but this provides little independent evidence of broad review or adoption.

Repo toolingcaution

Composer is used for builds, which fits the package ecosystem, but no security-scanning tooling is reported. That modestly reduces assurance about ongoing engineering hygiene.

Security policycaution

The repository has no published security policy. This is a transparency gap for a synchronization and Roundcube integration package, though it is not evidence of a security defect.