Fixing vulnerabilities and code smells