just FYI for anyone who doesn't know about this amazing tool yet:

https://github.com/semgrep/semgrep