Any confirmation that this isn't a clever trojan horse scheme? A private (and anonymous, to boot) non-directory plugin requires a lot of trust. Have you looked into the source code to make sure we're not getting pwned?

legit concern, not being facetious.