Secretive legacy vendors are being challenged by VotingWorks, a tiny non-profit that publishes every line of code powering its machines.