21
you are viewing a single comment's thread
view the rest of the comments
[-] sobchak@programming.dev 11 points 19 hours ago* (last edited 19 hours ago)

As a heuristic, I look at the commit dates to see if it's still being maintained. And lately I look at the commits themselves for evidence of AI use. Then I'll maybe do a web search for discussions to see what other people/the community has to say about it.

~~Gnuhealth looks like it may be dead (or at least the repo I found hasn't had a commit in many years).~~ (Nvm, they moved to codeberg which is a positive signal, IMO).

[-] BuckFutter@timeyak.com 0 points 16 hours ago

Yah I follow a similar approach in addition to doing a simple search for well known malicious commands like rm -rf / and some others as well.

this post was submitted on 13 Aug 2026
21 points (100.0% liked)

Open Source

48421 readers
144 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 7 years ago
MODERATORS