The PMD analysis currently works only for apex code. Being able to run it against visualforce pages/components would be of great use, since it would help identify security issues with VF pages/components.
Posted 22 Aug 2017
Thank you for request - it absolutely makes sense! We have PMD for Visualforce support in our backlog as well as we are thinking about adding support for the Lightning Lint to the IDE, so it would be possible to scan everything code-related.
We do not have exact timelines yet above the Visualforce PMD support, but I believe it should happen in the next months.
Thank you once more for sharing ideas with us.
Head of Product
The Welkin Suite
skype id: vladimir.gubanovich