I’m also fine with not making any changes to our recommendation at this time. The warning on the GitHub repo implies that no new features will be added, not that it will suddenly break or will develop security issues. No longer adding features to a “basically complete” app should be fine with us (see also: Remove PrivacyBlur - #7 by jonah).
The time to respond to a security vulnerability is a little long, but not entirely unreasonable for a project like this, especially for a bug which wasn’t high severity.
Therefore I will tag this suggestion as rejected for organizational purposes, but obviously let us know if the situation changes at some point.