Why writing open-source code is suddenly an existential risk, and the five-page bill designed to fix it