Currently we are relying on travis and tox to give us coverage reports. It would make more sense to use deepsource since it also has free CVE, bug risk, performance issues and anti-pattern recognition etc. built into it.