Risk Management of Free and Open Source Software