Pretty good, has some false positives. I use this for observing any security problems. It's produced a couple false positives surrounding input sanitation with PHP, it didn't follow the tracks to my sanitation function to see I was properly sanitizing input. Though overall it's pretty good.
