[nateberkopec]

The number of security patches to a popular open source project has only a very weak correlation to the actual number of security holes.