There would be no murder charges in that case. The developer of the “life critical application” has sole and ultimate responsibility to ensure that their produc

There would be no murder charges in that case. The developer of the “life critical application” has sole and ultimate responsibility to ensure that their product works as advertised. The developer of a dependency that they happen to use has no such responsibility. If the application developer updated his dependencies and then didn’t bother to verify that the application still works correctly, then that would be open and shut negligence.