https://www.linuxsec.org/2017/11/scan-source-code-plugin-wordpress.html