Make contract developers liable, then they will need to buy insurance that will be far more expensive than medical liability / mal practice insurance. So much so that every dev of sound mind and no company would never release code again.

With open source code all parties are liable for hiring someone to audit the code on their behalf and all auditors will also disclaim liaibility for missing things.

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store