I wonder if tools like this will put companies like snyk out of business. We use snyk at work and I have not been satisfied.
How can I trust that they show me all findings they have instead of selling the best ones to some three letter organisations?
Also they haven't figured out codeberg exists, so the resume page of a project of mine on snyk[1] still links to github and reports the project as "inactive", having the last commit 2 years ago, and the last release 2 months ago. I think it's quite telling of their quality.