In reply to Chip Bennett.

I'm happy to say that theme authors haven't been allowed to bundle TimThumb on ThemeForest since 2011. Totally agree with Chip that there is no reason to bundle it these days.