http://www.zdnet.com/article/researchers-find-widespread-weakness-in-tackling-open-source-vulnerability-risks/#ftag=RSSbaffb68