Add "plugin" to track PHP files with suspect "eval()"
Update README