If you depend so much on that code, if the security of your software depends on someone else's free work, why don't you hire that person to fix the bugs?