open-source-project-security-test