as Troy once said: "generating the matrix won't do anything, we need to quantify the open-source XSS card!"
