Play Open Source Security Best Practices for Developers, Contributors, and Maintainers