Is this project dead?

We will see, thank you.

Here is to hoping there is still some life here.
Else I have been building a set of scripts to pull in a list of known bad actors IPs from a threat feed into the OWASP rules if CWAF is not being maintained. not the preferred choice but I like to have contingency plans.