SMS: Safeguarding open source