cwe_checker vs Flyingduck Code Security Intelligence (2026)