SEMGREP

Summary from the TLDR Web Dev newsletter

Semgrep is a fast, open-source static analysis engine for finding bugs, detecting vulnerabilities in third-party dependencies, and enforcing code standards. Semgrep analyzes code locally on your computer or build environment.