https://foojay.io/today/predicting-secure-java-projects-on-maven-central/