We are a private contractor for a smaller government working with a system for hospital journals. The system is expanding quite rapidly (we got popular), but things are still very much manageable, despite the pascal codebase being well over 1MLOC.

The only thing not pascal is the GUI (which is getting ugly because our home-rolled wrapper to qt, so we are probably going to switch to something else) and the web interface (which was a web interface we inherited for this job. It was perl written by someone who thought himself smart. We rewrote that quickly in mojolicious).

So yeah. I work with pascal and do some (very little, I am not responsible for the web) web dev in perl. Now get off my lawn, your Node.js, go and rust is so shiny it hurts my old dusty eyes :)

We have had some code related security issues. Only one that was borderline severe, and that we discovered ourselves and patched by the end of the day (which was my fault, because I didn't follow the coding standard manual I WROTE MYSELF). No real stability issues, no real security problems.

Sometimes the tools matter. In our case not so much. I would love to rewrite the whole thing in Racket just for fun, though :)