3 ms·
Of course you should seek additional context if you need it. Community strength and commit activity are pretty useful to consider though. One useful conclusio
by cle 9y ago
Of course you should seek additional context if you need it. Community strength and commit activity are pretty useful to consider though.
One useful conclusion: security bugs are likely to be fixed in a timely manner that won't put your users at risk.
- jacobolus 9y agoAlternative equally speculative conclusion from the same data: the very-in-flux code is so shoddy that there are constant security bugs needing weekly fixes, whereas the stable and relatively inactive code is so rock solid that nobody ever needs to touch it for it to keep working. For example, how often does DJB publish new code changes to his various projects?