[dhekir]

Not only Infer, but other static analyzers would also be useful.

Hopefully Software Heritage (https://www.softwareheritage.org) will help with that.

[apaprocki]

Coverity scans most open-source software you likely depend on: https://scan.coverity.com/projects