> Libraries like that would probably benefit most from using a language with strict static analysis, like Rust. Wont help when developers then go out of their

> Libraries like that would probably benefit most from using a language with strict static analysis, like Rust. Wont help when developers then go out of their way to write a large amount of unsafe code. OpenSSL went out of its way to reimplement the C standard library wrong, making it impossible to use with analysis tools like valgrind or a checked malloc and generally confusing developers. iirc it even used malloc(pop)/ free(push) as a stack to pass data around at some point.