> But the question becomes: are they preformed? thorough? and the results acceptable?

Also, given that such code bases tend to be masses of closed code, who performed the tests or audited them?