Ok, so it's an important dependency, but the fact that it's a small product line can still explain the neglect. For example, is it baffling that companies don't

Ok, so it's an important dependency, but the fact that it's a small product line can still explain the neglect. For example, is it baffling that companies don't invest time/money in open source libraries they use even though those might be important for their main products?