As a heuristic, I look at the commit dates to see if it’s still being maintained. And lately I look at the commits themselves for evidence of AI use. Then I’ll maybe do a web search for discussions to see what other people/the community has to say about it.
Gnuhealth looks like it may be dead (or at least the repo I found hasn’t had a commit in many years).
(Nvm, they moved to codeberg which is a positive signal, IMO).
As a heuristic, I look at the commit dates to see if it’s still being maintained. And lately I look at the commits themselves for evidence of AI use. Then I’ll maybe do a web search for discussions to see what other people/the community has to say about it.
Gnuhealth looks like it may be dead (or at least the repo I found hasn’t had a commit in many years).(Nvm, they moved to codeberg which is a positive signal, IMO).Yah I follow a similar approach in addition to doing a simple search for well known malicious commands like rm -rf / and some others as well.