Look for old releases, unanswered notifications, missing licensing information, unclear maintainers, or no response to security issues.
These are project risks. They occur in open and closed software, but in open source they are often more visible.
What signs point to an abandoned or risky project?
Open source explained in plain language.