I recently wrote a post for work titled "Callgraph Analysis", about how to write a custom lint with access to the full call graph of a program. You can read it on my work's blog.