A year of open source vulnerability trends: CVEs, advisories, and malware — Blankdot