Defending Open Source Against Future Attacks