Source code analyzers: how generalizable are they?