6 places to continuously monitor for open source vulnerabilities