https://medium.com/write-your-world/the-dark-side-of-open-source-security-risks-every-developer-should-know-afdbec8962fe
