Trail of Bits' Patch the Planet initiative aims to secure open-source projects but reveals significant uncertainties about its overall impact and transparency.