In rejecting my Pull Request (Added a static analysis compatible config to the project), you said:

I prefer to use an external analyzer than modify project's settings.

Can you elaborate? What kind of static analysis will you accept? /analyze comes with Visual Studio, and the modification in the Pull Request had a separate build config to prevent interference with normal development.

/analyze not only finds a multitude of bugs in Notepad++, but it has tremendous potential to improve Notepad++'s overall code quality, so there's very good reason to use it.