> toggling static code analysis in your project Except that security must be on by default, and it must be made hard (or shameful) to circumvent it. We all kno

> toggling static code analysis in your project Except that security must be on by default, and it must be made hard (or shameful) to circumvent it. We all know any kind of protection is easy to bypass in C++. I remember an article from a Julia developer quitting over the culture of using unsafe code that had installed in the community. A mindset change is required by this profession. Too often (unverified) performance reasons have been used to justify risky code.