The OP refers to open source, but his comments apply just as much to any third-party component in your product. Many proprietary products also suffer from slow

The OP refers to open source, but his comments apply just as much to any third-party component in your product. Many proprietary products also suffer from slow or non-existant upgrade paths, and then what do you do to upgrade the component?