In one software audit a few months ago I worked with a small business here in Australia that hired software developers from a developing country. Within the first three hours of my analysis of the codebase I noticed I lacked the majority of the code necessary to execute the application. Not only that, I uncovered that the software developers hosted a significant part of the code on the internet, visible and accessible to the public.
