Which out of the following is correct about static analysis tools?