I saw at least 2-3 security reports as well pointing to various critical vulnerability.
Looked at the source as well - it makes zero sense. A lot of random commits. I suspect it would be trivial to introduce a backdoor the way this project is managed.
Too many red flags.
I would personally not touch this project.