> If it is open-source, you will see a meaningful activity - stars, forks, contributors.

That's not true, I'm quite sure most repos on GitHub have neither many stars, nor forks, nor multiple contributors.

To add to that, any metrics like these can be quite meaningless since you can just buy them online.

Please never rely on any such "social" metrics.

This is just a negative filter to see as a warning sign. It is like walking into a dark alley at night.

Nothing might happen but you should be on the alert.