>and particularly for a security-sensitive application, I quite like the fact that it hasn’t been updated in years
I feel like this is an oxymoron. At least security updates should be something to look forward to, no?
I feel like this is an oxymoron. At least security updates should be something to look forward to, no?
The difficulty is telling the difference between projects that rarely update because there aren’t any vulns, and projects that rarely update because they don’t care.