But if it does not getting any updates, it is a bit risky… Find a custom which gets security updates and then do whatever they say in other comments.