Isn't that rather the point of opensource? I rely version 2.xx of Blah, i want security fixes to version 2 without being forced to update to blah 7, with all it's new incompatibilities and bugs, just because somebody has a sales target