IBM and Red Hat’s May 28 announcement of Project Lightwell puts a hard dollar figure behind a problem security leaders have been feeling for years. The companies are committing $5 billion to help secure open-source software through AI-assisted validation, patching and engineering support, backed by more than 20,000 engineers and positioned as a trusted enterprise clearinghouse for open-source security. That scale matters because the risk is no l…