Comment by goobatrooba

One issue seems to be also that there are means dead plugins, not updated for years but still available. Does that mean they are especially stable or just no longer maintained? I don't know but ili applied the same rule I would for FDroid or the play store - not to install anything that isn't actively maintained.

Also I can't tell how to prevent plugin updates. As long as you rely on a known safe version I guess there is never any real risk.