Asking as somebody who does not really get this law jargon - if you distribute your software, which might be a little bit of glue code putting together some freely available open-source libraries, then would you be liable for auditing only this glue code or libraries as well? (since you would have to distribute them with your glue code, otherwise your product would be incomplete)
However, as I understand it: If it applies (e.g. commercial context) and you distribute the software or offer a product based on the software, you need to show the audit of all, not just a part (e.g. the glue code).
