An extendable, XPath driven, static code analysis tool for Magento, built on the top of PHP-Parser library.

• SQL Queries Within a Loop
• Not Limiting Collection Load Result
• Empty Class
• Empty Method
• Expression is Always True
• Empty Password in Configuration File
• Handling Overly Broad Event
• Use of Global Event
• Configuration Not in adminhtml.xml.

With Composer:

composer require --dev magento-ecg/magniffer

$ php ./vendor/bin/mgf /path/to/files

It's easy to create a custom inspection by declaring a message, xpath and inspector in YAML file. For example:

message   : Empty Class
xpath     : //node:Stmt_Class[count(subNode:stmts/scalar:array/*) = 0]/subNode:name/scalar:string
inspector : php