NSF investing in secure open-source ecosystems