Just keep your servers with outdated versions and someone will "test" them for you.
"We found a potential vulnerability, but not sure how this would be exploitable, but you better fix it when you have the time"
or a
"Fix it yesterday if you dont want an immediate server burn."
matters alot to small maintainers