Google, Microsoft commit $5 million for project to boost security of open source tools