Know, Prevent, Fix: A framework for shifting discussion around OSS securityopensource.googleblog.com5 pointsdlor5 years ago