BadCode is a signatures database for static source code scanner that identify bad security practices.