source code due diligence