Tips on Managing Your Open Source Risk