https://worldofsoftware.org/open-source-security-a-persistent-challenge/