Software flaws don't negate "many eyes" in open source