Looks like someone was willing to spend some time on an audit of the original KeePass:

https://www.ghacks.net/2016/11/22/keepass-audit-no-critical-...