php-yii-audit
Yii framework security audit tool. Performs white-box static auditing for Yii (usually referring to Yii2) access control (AccessControl/RBAC), CSRF, input filtering rules, output encoding strategies, URL/redirect security, etc., and maps to a general vulnerability type system (AUTH/CSRF/XSS/CFG/LOGIC, etc.).