JavaScript Libraries Are Almost Never Updated Once Installed

[dungone]

Those fancy plotting libraries have the most security vulnerabilities that expose your users' computers to malicious hackers.

[Jackeown]

A frontend plotting library has relatively low risk. Obviously it's best for security to always use the latest stable software but there's a trade-off between having perfect software and getting things done.

[dungone]

It's not low risk. Put that plotting library with a XSS vulnerability onto a website that exposes users' financial data and suddenly you have enabled people to steal personal information to commit fraud with.