Django seems to be a pretty active project, so I'm not sure what gave you the impression that it wasn't developed:

http://code.djangoproject.com/timeline

Looks like the 1.2.2 security release they did earlier this week was a bit rushed, partially because the security issue was reported via the public bug tracker instead of the security contact address.