@djm The most dangerous part is the combination of really low quality static analysis like that with authoritative sounding "this is the fix for this issue" formulatic patches.