Post #3220007

@whitequark@social.treehouse.systems @lina@vt.social Are you really suggesting that it's better to leave the code without any updates or hand off everything to someone that just pops up offering to fix those issues? Attackers will love to find out projects where the maintainer no longer cares about and either exploit those issues or as it has already happened offer to fix those current problems and some time later inject a very serious attack when people is no longer looking.