information on security issues of component-based development).
u There are questions of who will be held accountable (professionally
and/or contractually/legally) for software that turns out to be insecure.
Currently, developers bear (at least some) responsibility for failed