Displays upcoming events from the Roundcube calendar in the Mailbox view.
68%
Total Score
50
100
88
83
The artifact includes a license, but the manifest declares GPL-3.0 while the license file is detected as AGPL-3.0; the mismatch creates legal uncertainty despite the package being licensed.
The repository is owned by an individual rather than an organization, so the single-maintainer and single-contributor concentration remains material.
There have been three releases over 371 days, with two in the last 12 months and a median interval of about 147 days. This shows ongoing publishing but a modest cadence.
All recent commits came from one contributor, leaving maintenance highly concentrated and increasing abandonment risk for a user-owned project.
The repository recorded one commit in the last three months from one active maintainer. Recent activity exists, but the volume is too thin to demonstrate strong maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
roundcube/plugin-installer Version >=0.1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.