using static analysis to check for security issues.