Operation Rosehub – patching thousands of open-source projects