Secure open source collaboration: an empirical study of linus' law