Solving the problem of vulnerabilities & compliance when using Open Source in commercial product development