if ($source =~ /'\$/s) {
  push @errors, "possible unescaped sql string";
}