"Software vendors have started to address these problems through the adoption of static analysis and best practices, but these processes often extend only to th

"Software vendors have started to address these problems through the adoption of static analysis and best practices, but these processes often extend only to the code that they themselves author, not the open source they rely on. Recent data shows that 70% of internally developed software is tested for bugs, but only 35% of third party code is tested." You are talking about third-party and open source as they were the same.