I work at r2c, the company that maintains Semgrep. Happy to answer any questions! It's been a busy week for us; on Tuesday Gitlab announced that in release 14.0 they replaced their Py/Js/Ts security analyzers with Semgrep:
https://r2c.dev/blog/2021/introducing-semgrep-for-gitlab/