Anthropic finds 94 cases where open-source projects drop security controls without warning Help Net Security