The title doesn't really fit the article. The author just picked up an open source C/C++ library and found some bugs in its dependencies using their commercial

The title doesn't really fit the article. The author just picked up an open source C/C++ library and found some bugs in its dependencies using their commercial static analysis tool. This is hardly a surprising result, and does not tell us anything new about how one might evaluate or build highly trusted software.