b. How does the development team keep current with third-party libraries so that it does not use code with
known vulnerabilities?
c. How are third-party code changes and vulnerabilities tracked/monitored?
d. Which third-party libraries were independently examined for vulnerabilities before being included in