[loginusername]

Any program that is constantly being updated and/or re-released is, for me, the one I'm more wary about trusting. As an example, look at djb's software. After a period in the beginning, you do not see the constant releases and updates.

To me, trustworthy software is software that is "correct", if that is even attainable.

Ideally, if the author is truly careful, it should be close to "correct" when it initially released.

Numerous releases and updates year after year to me suggests the software was not very close to correct when the author decided it was time to release. Or that the author is pandering to feature requests.

As with the parent comment, this is only an opinion.

NaCl and CurveCP have not been updated in years. But I feel it's more trustworthy than TLS.

I'm just a fool I guess.