Thanks for the details! I was speaking from memory, but I see the last merge was quite a while ago. That somewhat increases my trust on the project then, although I'm not sure I'd ever trust a minor browser fork without further security assurances.