I work at r2c, the company that maintains Semgrep. Happy to answer any questions! It's been a busy week for us; on Tuesday Gitlab announced that in release 14.0 they replaced their Py/Js/Ts security analyzers with Semgrep: <a href="https://r2c.dev/blog/2021/introducing-semgrep-for-gitlab/" rel="nofollow">https://r2c.dev/blog/2021/introducing-semgrep-for-gitlab/</a>