What the Internet Bug Bounty Teaches About Open-Source Software Security

https://securityintelligence.com/articles/open-source-software-security-bug-bounty/