[split] Shopping Cart?

You should know I wouldn't judge other projects based on a stranger's tweet.

But that they currently have insecure pieces of code isn't the problem - even if the code was written by a security expert, it's years-old and security practices get updated regularly, of course somebody is going to find some weakness at some point.

The problem is that they refuse to fix vulnerabilities when reported and security researchers are met with extreme hostility for no obvious reason. It's not like I haven't been accused of acting hostile at times, but if you think I'm bad, you should see that Daniel Kerr guy, lol.