From the technical perspective, usually the issue with old CMake-based libraries is that they tend to not play nice when imported as subdirectories. Some of the problems that seem to be common: 1. They add too many dependencies 2. They do their own detection of compiler flags (that osquery should be able to override - example: it needs to let the lib know that we are compiling with a certain C++ standard and cpp lib) 3. Dependencies are brought into the project the wrong way (example: they detect the local libssl-dev library and link to that, causing portability issues and mixing multiple libssl versions) 4. Install targets that can't be disabled (pollutes packaging) 5. Tests that are built (and sometimes installed) by setting the generic ctest flag instead of using their own (polluting the value for other libs) 6. Variant of #4: also exporting targets with no chance of disabling it, causing additional dependency issues