https://zephrcf.leaddev.com/software-quality/security-scratch