So...
Is it being a member since 2007 or having made 2,435 posts that qualifies as untrustworthy?
Most items in the Plugins have a github repository. It IS the thing of Open Source.
I wasn't saying I didn't trust the poster. I was talking about downloading zencart plugins from places other than from zencart. Whoever's running the show here today I expect vets all code for malicious stuff before letting it go live for download.