A great metric for job security, not necessarily for better software: Unless it concerns security or correctness, I prefer an old but audited version of a libra

A great metric for job security, not necessarily for better software: Unless it concerns security or correctness, I prefer an old but audited version of a library anytime over a newer version that I have to audit again. A metric like this will be loved by PMs and loathed by developers who have to leave a known, sane state, update and deal with the fallout later on.