https://orbitbrain.com/blog/googles-guac-open-source-tool-centralizes-software-security-metadata/