In most small software companies, the development team integrates third-party code into the product because it shortens development time. You need to identify and document these packages for a number of reasons:
Potential investors will request this information as part of due diligence.
External security audits will require a list of third-party packages used.
Third-party packages can increase your product costs if the vendor raises its rates.
Third-party package vendors can change licensing requirements, making it difficult to meet your goals and the license requirements.
Third-party packages can affect the quality of your product.
A third-party package that you have modified can increase ongoing costs, ...