I chose a .Net library (Zedgraph) about 10 years ago, partly for the opposite reason. It was already known to be "finished", what you might call dead. It reliably does what I want so I don't care about updates. I'm still using the same version today and never had to even think about updating or breakages or anything. It just keeps on working.

Mind you, it's a desktop application not exposed to the internet, so security is a little lower priority than normal.