I've heard good things about this. It used to be a commercial product, but ended development when it was replaced by the more upscale Expression Engine.

My question is this: how safe is it to install something that is no longer being developed? I assume that if a security risk is identified, nobody is likely to step in and create a patch? What opinion do y'all have on using software no longer in development, particularly in connection with the issue of possible security bugs?