Legacy unsupported open source projects with outdated dependencies. (We work on a very large Java application (1.8M lOC) and were acquired by large financial in

Legacy unsupported open source projects with outdated dependencies. (We work on a very large Java application (1.8M lOC) and were acquired by large financial institution that has a lot of policy around open source libraries and support.)