Display additional information for the current user and much more.
68%
Total Score
50
100
94
50
The package declares GPL-3.0 but its license file was detected as AGPL-3.0. A license file exists in both the artifact and repository, so this is a genuine compatibility clarification rather than an absence of licensing.
One contributor made 100% of the two recent commits. With user-owned rather than organization-owned project backing, this creates a meaningful continuity risk if that maintainer becomes unavailable.
Only two commits were made in the last 3 months. That is recent activity, but it represents a thin maintenance pace for a package with security-related release notes.
The repository has no security policy. This is a transparency gap for a webmail plugin that handles account and server information, though security scanning and release notes provide some compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
roundcube/plugin-installer Version >=0.1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.