Yasca is an open source program which looks for security vulnerabilities, code-quality, performance, and conformance to best practices in program source code.