All the maintainers quit, including the single security engineer. The code is now unmaintained. There's a good argue that security has been reduced.