A Lively Market, Legal and Not, for Software Bugs