my concern with PW Gorilla is only the point I mentioned: lack of active development, and recent update is not part of open source repo. I'm in no way capable

my concern with PW Gorilla is only the point I mentioned: lack of active development, and recent update is not part of open source repo. I'm in no way capable of evaluating the security of open source password mgr implementations, but I'm willing to gamble on the lower tier passwords that a lot of expert research is validating the strength of the popular ones. For closed source, I think I have to assume they are screwing something up.