follow-up to code review, can be useful for detecting simple faults overlooked
by the reviewer. Compilers cannot, however, be relied on to perform more
sophisticated detection of byzantine faults that are often indicative of complex
vulnerabilities, although other tools do exist to help developers detect such