>You really need to think a bit deeper about this. You obviously don't have much experience with security and you make a lot of assumptions here No it's you wh

>You really need to think a bit deeper about this. You obviously don't have much experience with security and you make a lot of assumptions here No it's you who is making assumptions and operating on "it must be this way" sense. Simply because a project has not had changes in a few years (or even many years) doesn't make the project insecure or bad. Can there be bugs or security issues? Or course, any software can have those, but merely change rate as you see on the project download page has no bearing on that.