There's a simple fix to that:

    -Wsign-conversion -Werror

You've effectively just made C into a safer language by disallowing implicit conversions that change signedness.