Top Three Open Source Security Risks and How to Mitigate Them