I don't have any strong opinion here; at some level, this is @tOkeshu's decision.  That said, finding a single bug in a library doesn't, by itself, seem like a super strong reason.  I expect we'll find bugs in more than one library that we depend on.