“Highlights free security resources for the open-source community, though slightly tempered by the lack of human review.”