> Entirely impossible to answer any “would you pay” questions without knowing the cost. That's why I asked people to comment what their companies would pay. >

> Entirely impossible to answer any “would you pay” questions without knowing the cost. That's why I asked people to comment what their companies would pay. > Asking a vendor to accept liability for 3rd-party code is some combination of an insurance policy and a full audit. Both of which are extraordinarily expensive for any large software package. Not necessarily, as long as the vendor makes clear how much liability they are accepting. That's why I said specifically what liability I would be willing to accept.