Matomo Analytics integration plugin for Roundcube
62%
Total Score
50
100
79
75
The manifest declares MIT, while the repository license file is recognized as AGPL-3.0. This unresolved mismatch creates a material licensing and transparency concern.
The package has three releases, but none in the last 12 months; its latest release is about 13 months old. That suggests limited release maintenance for a dependency consumers may need to track.
The repository recorded no commits and no active maintainers in the last three months. The repository was pushed more recently, but current activity is still absent.
Composer is used for the build, which is appropriate, but no security scanning tool is configured. This is a modest transparency and maintenance gap for a published plugin.
The repository has no security policy. For a small plugin this is not severe, but it leaves vulnerability-reporting expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.