Ok, fair enough, I'm relatively skilled and I've taught C (and some C++) to people, so I guess I'm biased. On the other hand - extensive compiler warnings + no

Ok, fair enough, I'm relatively skilled and I've taught C (and some C++) to people, so I guess I'm biased. On the other hand - extensive compiler warnings + non-MISRA general-purpose static analysis would probably cover those.