vimeo / psalm

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

FriendsOfPHP / security-advisories

A database of PHP security advisories