This is not best tool for static code analysis, but it has low number
of false positives. We might want combine it with another tool to have
better overall check.