Code Ownership in Open-Source AI Software Security