20191028 - OSS EU 2019 - BoF Securing open-source dependencies, incident response, vulnerabilities, and bug bounties.pdf