Are they? I've never been able to blame library authors or hold them accountable for code running in my production environment.