Bugwatch: Keeping alien code at bay