<p>I don't have a strong opinion on the first point, as we're only using this tool part part of the CI chain, and it doesn't introduce any new runtime dependencies. I'm also using tools like coverity for cgimap to check for issues in c++ code, even though they're not open source.</p>
<p>Regarding the second point, I haven't really seen anything in the config settings like a rubocop style exception definition to disable checks on file/method level. This seems a bit unfortunate as we would skip some checks globally, even for newly introduced issues. Maybe I'm missing something here in the documentation and more fine grained control is possible somehow.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/openstreetmap/openstreetmap-website/pull/2229?email_source=notifications&email_token=AAK2OLOIAWAMJ354STKOEDDQELRJTA5CNFSM4HN5ECS2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD4GJA2Y#issuecomment-520917099">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AAK2OLMHCACZJRICC5ZYVSTQELRJTANCNFSM4HN5ECSQ">mute the thread</a>.<img src="https://github.com/notifications/beacon/AAK2OLP2OXUXJPDJIU6PZQDQELRJTA5CNFSM4HN5ECS2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD4GJA2Y.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/openstreetmap/openstreetmap-website/pull/2229?email_source=notifications\u0026email_token=AAK2OLOIAWAMJ354STKOEDDQELRJTA5CNFSM4HN5ECS2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD4GJA2Y#issuecomment-520917099",
"url": "https://github.com/openstreetmap/openstreetmap-website/pull/2229?email_source=notifications\u0026email_token=AAK2OLOIAWAMJ354STKOEDDQELRJTA5CNFSM4HN5ECS2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD4GJA2Y#issuecomment-520917099",
"name": "View Pull Request"
},
"description": "View this Pull Request on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>