open-source security threats