> when they went a year without a release. Cause these libraries depend on other libraries that are probably extremely out of date at that point and have their

> when they went a year without a release. Cause these libraries depend on other libraries that are probably extremely out of date at that point and have their own security vulnerabilities. An example of a project that hasn't been dismissed as "abandoned", is https://github.com/patrickmn/go-cache https://github.com/patrickmn/go-cache because it explicitly doesnt have dependencies. So yeah, if you have a semi-complex library, a year without a release is abandoned.