The Google vulnerability program is to improve security on
third party software is a great idea. The open source community wants to
improve software in the security area. The financial incentive ranging from $500 to $3000 would provide has great potential to advance the programs. The patched that are
submitted could be a major benefit to security programs. Is the Google model
going forward to open source?