Software vendor liability