Sonar - maybe I should check this out for the company to see if it can analyze our Python codebase. (It doesn't work out of the box, so you would need to find or write a plugin for it)