Loading: It's High Time for a Security Scoring System for Applications and Open Source Libraries