Never upgrading the dependencies is not specific to research. For example the npm installations of react show that old versions are still downloaded a lot in t

Never upgrading the dependencies is not specific to research. For example the npm installations of react show that old versions are still downloaded a lot in the last 7 days: https://www.npmjs.com/package/react?activeTab=versions https://www.npmjs.com/package/react?activeTab=versions jQuery on a random CDN with stats also shows that many websites are likely never going to update it: https://www.jsdelivr.com/package/npm/jquery?tab=stats https://www.jsdelivr.com/package/npm/jquery?tab=stats You also sees that with system administrators: here is curl on debian from people who shares about it: https://qa.debian.org/popcon-graph.php?packages=curl&show_installed=on&show_old=on&show_recent=on&want_legend=on&want_ticks=on&from_date=&to_date=&hlght_date=&date_fmt=%25Y-%25m&beenhere=1 https://qa.debian.org/popcon-graph.php?packages=curl&show_in...