M
Mark Wilden
I had to add various security
assertions, and basically wasted lots of time trying to keep it happy.
I think this is the trap - trying to make a tool happy, instead of the other
way around. I've succumbed to it myself.
Actually, I'd prefer if it started with nothing and only opted into
things slowly, from an extremely high threshold, like a compiler.
The thing about this approach is that you don't know what might be wrong
with your code that the tool can find and that you never even suspected.
That's why I'll run FxCop (or lint, or whatever), examine its output, then
turn off what I don't agree with.