A more interesting comparison than with Coccinelle is with semgrep (<a href="https://semgrep.dev/" rel="nofollow">https://semgrep.dev/</a>) since it also supports semantic/structural pattern matching over a number of languages, but also adds in a bunch of Boolean logic into the mix, as well as some more advanced semantic features like constant propagation.<p>Curious whether the teams behind these tools are aware of each other? I suppose it's unlikely that they're not.