The State of Open Source Vulnerabilities Management in 2019