Good article. In addition to running flog, I also run brakeman and rails_best_practices.