>> When there is a nasty bug found it's hard to shake the feeling of responsibility. I know right? Someone just opened a github issue for a CVE in one of our d

>> When there is a nasty bug found it's hard to shake the feeling of responsibility. I know right? Someone just opened a github issue for a CVE in one of our dependencies. It's only relevant if you're opening a .DXF file from an untrusted source, so it doesn't seem terribly relevant but yet... And updating to a newer version would take effort, and we want to replace it with something else anyway which would take effort. None of that effort is where I want to spend my free time. But I do work on the software because I like it and really want it to continue being around and useful, and that isn't going to happen unless I (and others) make it happen.