C3P0 一直有在更新，最新一次是节前 9月29日 提交的 0.9.2 Pre5 版本，下载地址：
-- Some fixes of issues with per-user config overrides, verified and
updated docs with respect to per-user configs.
-- Unsynchronized access to identityToken in the various identityTokenized
beans, marking the property volatile instead. This should resolve an
occasional deadlock. Many thanks to Phillip Henry, see
-- Fixed a bug whereunder PoolBackedDataSources threw an Exception
trying to bind per-user overrides that properly should be bound
only to WrapperConnectionPoolDataSource (or to ComboPooledDataSource,
which wraps that). Many thanks to Walter Marcelo Pedrozo Barboza
for calling attention to this issue.
-- Fixed broken version on Maven dependency to mchange-commons-java.
Version was hardcoded, now uses version number that c3p0 was built
-- Added workaround for bug in Maven 2.2.1 that sometimes leads to corruption
of deployed artifacts. See http://jira.codehaus.org/browse/MNG-4301
-- Eliminated bead RELEASE suffix from use in staging to Maven repository,
which should fix managed dependency problems for Maven users.
-- Required tests of PooledConnections to own the locks associated with those
PooledConnections in order to prevent occasional deadlocks when PooledConnection.close()
coincides with a Connection test. Many thanks to an anonymous SourceForge user for
calling attention to this issue.