https://www.hissenit.com/open-source-and-security-why-open-source-is-not-insecure-frank-hissen-it-blog.html