Most of the sources and binaries are from 2012. That version of bash would have the shellshock bug(s).

This project is a Good Idea, but it would be overwhelmingly more useful if it tracked modern versions.