Most of the sources and binaries are from 2012. That version of bash would have the shellshock bug(s).

This project is a Good Idea, but it would be overwhelmingly more useful if it tracked modern versions.

So binaries in source control, source files in release. I don't know what to write.