BadCode is a signatures database for static source code scanner that identify bad security practices. - View it on GitHub