Look for eval and warn people about implications

Coder 7.x is frozen now and will not receive updates. Coder 8.x-2.x can be used to check code for any Drupal version, Coder 8.x-2.x also supports the phpcbf command to automatically fix conding standard errors. Please check if this issue is still relevant and reopen against that version if necessary.

The /e modifier for preg_* functions is already covered in PregSecuritySnif with "Using the e flag in preg_*() is a possible security risk. For details see https://www.drupal.org/node/750148 ".

For eval() we could just add it to DiscouragedFunctionSniff?

Pushed that.