It is done, but not dead? to me that sounds like a contradiction given that there is always a need for security patches and also given the limitations mentioned such as improving bundle size.
"We will address critical security concerns as they arise."
Perhaps a better term than "done" is "feature complete".