The burden of knowledge: dealing with open-source risks
lwn.net