Open source's open sore