Or use an out of date library.

In our somewhat “developer assisted” AI development it planned to use a library. We looked the library up and the GitHub page indicated it was “no longer maintained use other library Z”. When told AI agreed and compared the original to the new library (helpful), but it seemed to heavily weight GitHub stars more than active development.

Tools like SCA and SBOM are still needed to ensure your stuff isn't out of date. That's not exactly a problem an LLM solves.

When a project talks about how many stars they have, I immediately mistrust them.

Usually download counters and stars are signals for VC, which indirectly serve also as negative signals to me.