shouldn’t matter who does it or for how much, as long as the sw lifecycle process is followed (which would include supplier oversight). Actually writing code, btw, is the cheap/easy part- designing correct system and sw requirements, along with verification, is much more expensive.