We have a large code base of approximately 200,00 lines where Spring 2.X is used as the basic application development framework. We are thinking of undertaking a major (and painful) upgrade to Spring 4.X because of the simple reason that Spring 2.X does not seem to have any commercial support anymore.
I have also noticed that the last version of Spring Framework, 2.5.6, hasn't had any bug or security fixes for the past 5 years? Does this mean that Spring 2.X is an orphaned project?
http://sourceforge.net/projects/springframework/files/?source=directory