Question: Are vulnerabilities found more often in newer or older libraries?

I'm looking for studies or references looking at how/when vulnerabilities are more likely to be found in libraries. This relates to allow vs block listing of third party libraries.