@puppygirlhornypost @hipsterelectron Not a tool to automatically traverse package dep trees (we have those, no?) but to evaluate an individual library for things like thread unsafe init/exit code, sketchy dynamic code mechanisms, ctors with side effects, etc - things that might make your program vulnerable to bugs or backdoors just by linking the lib even if you don't call it.