Bad memories at my former big tech company. Whenever we initiated a new (internal) SW project, it had to go through an audit. One of the items in the checklist

Bad memories at my former big tech company. Whenever we initiated a new (internal) SW project, it had to go through an audit. One of the items in the checklist for any dependency was "Must have releases in the last 2 years" I think the rationale was the risk of security vulnerabilities not being addressed, but still ...