Are the source codes of the PL/SQL-Developer plug-ins checked by Allround Automations for malicious code or how does Allround Automations ensure that no malicious code is contained?

Allround Automations only checks the functionality of the Plug-Ins. The source code is not always available to us.

ok.
The current times are very dangerous for companies for extortionate software. Can Allround Automation perhaps do more to protect PL/SQL developer customers from these dangers? It would also help to mark what has been checked and what has not.