Toward solving the security risks of open-source software use