A high rating there most likely merely means it was easy to install for people with little background (which isn't bad, but is no indicator about the code quality) and looks cool (dito). I'd be surprised if even 10 of them hold up against a serious audit. (Strict/warnings? Taint? Proper validation of params? Escaping of returned user input (XSS)? Etc etc.)