Really glad to see this open-sourced. One thing I'd be interested in is how you think about the balance between false positives and false negatives. In practice

Really glad to see this open-sourced. One thing I'd be interested in is how you think about the balance between false positives and false negatives. In practice, developers tend to stop trusting security tools if they generate too much noise, but missing a real issue is obviously costly too.