Warning, this component does not show security issues in OH, however there are many CVEs issued (for older versions). They are currently assigned mostly to icu_for_java project (as false positives) instead.
Other than that project is pretty constantly active and complete.