https://engineering.fb.com/security/zoncolan/
https://www-wired-com.cdn.ampproject.org/c/s/www.wired.com/s...
Also reminds me of sonatype or findbugs which does something similar but works on a set of rules instead of on ML.