Open Source Security Patch Rewards