the field of engineering exists so that these types of problems are known by nature of what subfield you are working in so that you can use your expertise at the time of design to avoid such problems. COTS (TM) isnt a scapegoat either. dont buy bad components. electronics and mechanics are hundreds of years old. you should have seniors in your company that know which vendors are reliable. if you are a startup, you still should have attended a university that explained the meta to you. im sure most software engineers who think they can just use some random lib written by some geek and inherit the bugs from it will disagree