See #243 for motivation. Not looking to go through the whole codebase at once, just setting up the tool with sensible config and then compliance can be reached gradually.