Things found on
<https://wiki.debian.org/HowToPackageForDebian#Check_points_for_any_package>
but not included here yet::

   find ! -type d -print0 | xargs -0 file | grep ': *ELF ' | sed 's/: +*.*//' | xargs -d'\n' --no-run-if-empty eu-elflint --quiet --gnu-ld --strict
   grep -r 'PATH' .
   grep -r 'x86_64-linux-gnu' .

Places to find new checks:

apt-file search --regex 'bin/.*(lint|check|valid|tidy|detect)'
apt-cache search --names-only '(lint|check|valid|tidy|detect)'
https://github.com/vim-syntastic/syntastic/tree/master/syntax_checkers
https://pagure.io/FedoraReview
https://github.com/michenriksen/gitrob/blob/master/signatures.json
https://docs.codeclimate.com/docs/list-of-engines
https://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#C.2FC.2B.2B
https://github.com/mcandre/linters
https://gitlab.com/linted/linted/tree/master/scripts
https://support.codacy.com/hc/en-us/articles/207995005-Special-Thanks
https://github.com/linuxfoundation/cii-best-practices-badge/blob/master/doc/criteria.md#user-content-analysis
https://github.com/simplymeasured/ruby-appraiser
https://bazaar.launchpad.net/~ubuntu-security/ubuntu-security-tools/trunk/files/head:/audits/
https://github.com/sk-/git-lint
https://prospector.readthedocs.io/en/master/supported_tools.html
http://www.flycheck.org/en/latest/languages.html
https://atomlinter.github.io/
https://github.com/coala/coala-bears/tree/master/bears
https://github.com/coala/bear-docs
https://github.com/alecthomas/gometalinter

A mechanisms for filtering output is needed.

Only inform about a skipped check if there were actually matching files.

A mechanism to specify the amount/pedanticness of the output.

Support commands that must be run with `find -print0 | xargs -0` instead of `find -exec`

Sandboxing with kvmtool/bubblewrap/firejail/etc:

Files in cwd to read-only unless modify flag
Files in cwd to no-exec unless dangerous flag
All other files to read-only
All processes to cgroup, kill after each command

Add more types of deps for general and language-specific package managers

Add the ability to suggest command-lines for installing missing tools

Check if any tests contain dangerous commands:

python -m
python -c

.. vim:ts=3 sw=3 et ft=rst
