Because they could have a security flaw that might compromise your project or any users of it.