> has basically all the same packages brew does

I just checked the Semgrep port and while technically it does have it, it is around 150 releases behind the version brew has.