Detect use of sprintf()

[guillaumeaubert]

This should probably be considered a violation:

my $sql = sprintf(
        'SELECT * FROM %s',
        $table
);