I'm not so sure about that. Most likely, there will be a burden of proof on whoever makes a claim of this type. Just think about how many various lib's are inv

I'm not so sure about that. Most likely, there will be a burden of proof on whoever makes a claim of this type. Just think about how many various lib's are involved in one application. If the problem lies in one of the libs, they'll hunt down whoever made it. I have mixed feelings about a law like this but I can't say I don't agree with something like this as a principle for paid software. Maybe liability will reduce the number of backdoors in software that we pay for. As for FOSS projects on github and such, there is no contractual obigation of any kind as long as you don't see lic's or stuff like that. That being said... I've heard some horror stories that defy common sense so wouldn't be surprised by anything.