That's a cross purpose argument
Re:Data Loss at GitLab
by mondoshawan on Thursday February 02, 2017 @07:33AM
(#13550066)
The one with the CVEs because it has had eyes on the source enough to generate them. The devil you know and all that.
Exactly. They've made mistakes, and can recover from them.
The other hasn't had that chance.
Thus, try the first, as it is better tested in the world.
That's very different, though. I trust the company/organization that had to fire an employee for a horrible mistake. They are going to be very careful with who they hire or let near the code in the future, and had much more to lose than a single person.
But I don't trust the employee that was shown forgiveness for a horrible mistake. Some might learn to not repeat what they had done, while others learn that they can get away with things through the magical power of phrasing the situation in a positive light. And some might be mistake-makes-for-life. Not all people come out the other side stronger.
A not known library that also addresses the same circumstances as curl might have none listed.
Which would you prefer to use?