https://www.securityprivacyrisk.com/commercial-code-is-more-compliant-to-security-standards-than-open-source-code/