Open Source Software Security Best Practices