Because often, somebody wrote something a few years ago and there isn't a business case to constantly upgrade every single dependency.