Roundcube plugin that displays SPF status for messages
62%
Total Score
caution
Usable with caveats: one release and no recent commit activity make long-term maintenance uncertain.
This package has only one release, published about 13 months ago, with no releases in the last 12 months. That limits evidence of an established maintenance cadence, although the plugin may be intentionally stable.
There were no commits and no active maintainers during the last three months. For a plugin released only once, that provides weak evidence of ongoing maintenance and raises abandonment risk.
The repository has only 2 stars and no forks or watchers. Popularity is not required for a small plugin, but these numbers provide little supporting evidence of community review or adoption.
Composer is used for build and packaging, which fits the ecosystem, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy. For a small mail-client display plugin this is a transparency gap, but it is not by itself evidence that the release is unsafe to depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.