Stav dette: Detecting Bugs and Security Issues by Identifying Developers’ Blind Spots