I'm a little bit worried, but like I was saying as long as they keep up with upstream vulnerabilities in dependencies and any bulbs that come up that's ok..software doesn't have to be constantly evolving for it to be useful and usable.
Development isn't super active, but there's still occasional commits to update dependencies and what not. If no security vulnerability has been discovered it doesn't need more than that since it works given the existing feature set.