haskell-quickcheck-safe