Security Controls in Shared Source Code