Open-Source Security Best Practices You Can't Ignore in 2020