Pixy is a scanner static code analysis tools that scans PHP applications for security vulnerabilities. - View it on GitHub