Combining traditional audits with open community-backed audits paves the way for a resilient security model that suits projects of all scales.