https://www.techradar.com/news/google-backs-call-for-tighter-open-source-security-in-aftermath-of-log4j