I noticed it uses Bash 3.2 which is old. The reason Mer provides it, is to appease vendors who are scared of GPLv3. But Jolla isn't scared, so why isn't newer Bash packaged? I think Mer should provide an alternative set of newer packages for those vendors who aren't scared of GPLv3. I.e. those should be two sets of packages provided by some metapackage. For example:

gpl3-vendor
gpl2-vendor