Know, Prevent, Fix: A framework for shifting the discussion around vulnerabilities in open source

The security of open source software has rightfully garnered the industry’s attention, but solutions require consensus about the challenges and cooperation in the execution.