> If it does what I need but has a dozen security flaws because the maintainer just doesn't care anymore it makes a difference Does it? The alternative might b

> If it does what I need but has a dozen security flaws because the maintainer just doesn't care anymore it makes a difference Does it? The alternative might be to write your own code, which will carry your own flavour of security issues. No matter what code you adopt, be it your own or someone else's, will require some level of commitment in maintaining it.