https://dusted.codes/can-we-trust-microsoft-with-open-source