Finally had a bit of time to play with the new free @snyksec code checker. Works really well. Take a look - https://snyk.io/code-checker/