Yesterday I was auditing a batch of Crystal projects on my Fedora workstation, and it hit me how much the day-to-day code review threat model has shifted.

For years, if you wrote Crystal, your static analysis workflow was straightforward: you ran the compiler for type safety and Ameba for style …