open source software audit