this post was submitted on 13 Aug 2026
41 points (97.7% liked)

Open Source

48421 readers
498 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 7 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[โ€“] sobchak@programming.dev 25 points 1 day ago* (last edited 1 day ago) (1 children)

As a heuristic, I look at the commit dates to see if it's still being maintained. And lately I look at the commits themselves for evidence of AI use. Then I'll maybe do a web search for discussions to see what other people/the community has to say about it.

~~Gnuhealth looks like it may be dead (or at least the repo I found hasn't had a commit in many years).~~ (Nvm, they moved to codeberg which is a positive signal, IMO).

[โ€“] BuckFutter@timeyak.com 2 points 1 day ago

Yah I follow a similar approach in addition to doing a simple search for well known malicious commands like rm -rf / and some others as well.