Lots of FUD in the opening paragraphs ("no changes to server code since April!!1!"). I stopped reading after that
https://github.com/signalapp/Signal-Server
If you go here https://github.com/signalapp you can see there were changes 8 hours ago.
So yes no public changes have been pushed, but changes are happening. It is fair to ask what changes are being pushed given their push for privacy.
How much do you want to trust here?
Even so, I’ve yet to come across a software project in my career that didn’t have a fully stocked backlog of bugs, performance optimisations, security improvements etc.
In most cases if I find a project on GitHub that hasn’t been updated in 6 months, it’s usually a sign that it might be dead or languishing. Not saying that’s the case here, but the question seems valid.
Also not making a value judgement. Signal is free and open source, and the guys are rockstars.
But it does make me wonder if what’s running in production is a 6 month old build of that code, or is there more to it...