@neal @dalias I think the perceived weakness is that it's written in unmanaged memory unsafe languages e.g. C and assembly. That the specific has been stable is a benefit, any specification that has remained stable long enough become well understood and the misuses well understood. Also without the safety manual we don't know the conditions of use e.g. no pthread condvars. Some APIs also while semantically stable see constant hardware updates e.g. memset.