Four months after its launch, IBM and Red Hat’s Lightwell has remediated more than 400 previously unknown vulnerabilities in open-source Java libraries.