aura: Security auditing and static code analysis