new | show | ask | jobs Github

JoshTriplett 5 days ago

That's what I'd expect if I see a project with no commits in 2 years. Not 2 days.

▲

goodpoint 4 days ago | parent [-]

There's ton of perfectly usable 2-years old software.

▲

geraldwhen 4 days ago | parent [-]

I suspect that CVE inflation has poisoned the minds of many developers.

A db driver may have an issue with unsanitized user input when run against SQLite, but you only use it with oracle and sanitize input anyway, but that shows up as a 9.1 critical deployment blocker for corporate employees.

Unexploitable CVEs with inflated ratings make using any open source software a pain in the butt at BigCo.

	▲	goodpoint 3 days ago \| parent [-]
		Old does not mean vulnerable.