A method, apparatus, system, and signal-bearing medium that in an embodiment install a new or fixed version of a program if the program or a feature in the program has been used more than a threshold number of times. If the program has not been used more than the threshold, the new or fixed version of the program is not installed. In an embodiment, an environmental condition is used in determining whether to install the new or fixed version. In this way, the risk that the new version will cause new problems is balanced with the likelihood that the problem solved by the new version will be encountered.