Measuring security risks in open source software | Hacker News Reader