Consuming Open Source Securely using S2C2F