Securing Open Source Software - End-To-End, At Massive Scale, Together