#survey by Open Source Security Foundation