Merge: metrics: `--nullables` distinguishes safe and unsafe calls on `null`