Open Source Security By the Numbers