Asking as somebody who does not really get this law jargon - if you distribute your software, which might be a little bit of glue code putting together some freely available open-source libraries, then would you be liable for auditing only this glue code or libraries as well? (since you would have to distribute them with your glue code, otherwise your product would be incomplete)