Isn't it PHP based. I worry about anything written in that turd of a language.
7.0 had some issues so bad it's almost impossible to find anymore. Seems like they tried to erase it from the internet. The language itself is an attack vector.
OT: please (re)read the HN Guidelines. https://news.ycombinator.com/newsguidelines.html
You said "i'm happy running it on my ...vps."
And now "Then I wouldn't use Roundcube either." So you're not running roundcube then?
Also, love how you said you loved roundcube because it works on "lightweight el cheapo VPS", and then backtracked once you found out it uses PHP.
Both start with coll/cooll, I've got to increase my zoom apparently.