Fucking pay them or write them yourselves.

This. Refactoring the whole code is insanely time intensive, even if developers know multiple languages. All these critical components you rely on, you use without any compensation or support and then dare to complain it’s not your security standards. Fix it, or pay for it to be fixed.