To add to what the other commenters are saying, I also sometimes look at whos responsible for the software. Is it a repo from a big company? Is it a gnu project? Is it just from somebody with a username consisting entirely of numbers? Is it hosted on codeberg or forgejo or some other friendlier server? That stuff also says alot, even if there are few recent commits, if its from reputable people you may still get well maintained software.