What kind of indirect dependencies it would add, who else is using it (ie. if BigCo's public code uses it, it can't be that bad), is it actively maintained and

What kind of indirect dependencies it would add, who else is using it (ie. if BigCo's public code uses it, it can't be that bad), is it actively maintained and does it look like it will be maintained for the foreseeable future. Things like sparse documentation or stale code that does things in an "old" style aren't really signals to me. I'll gripe about it for sure but plenty of good libs have those warts.