open source vulnerability scanning