Presently, all comments about plugins are on our blog for webmasters:
Building a WordPress site ~  WordPress Plugins (https://webtools.abcinc.pw/2019/01/install-wordpress-plugins.html)
One day, we’ll transfer those comments to this page.
Meanwhile, at the WordPress Meetup in St. Petersburg, Jim True (moderator) pointed out that he won’t install/use a theme or plugin unless it is available on the WordPress.org repository.
The WordPress team reviews everything that is available through them. THEY DO NOT CHECK FOR QUALITY OR IF IT IS APPROPRIATE FOR A USER. Instead, they verify that the internal coding meets the WordPress specifications, and that it doesn’t contain any malicious code or “malware.” At least that’s something for a user to begin their due diligence.
Welcome: we want to build your business….