https://leaddev.com/software-quality/security-scratch