Thread: A few thoughts on why ...
1/
Background: I'm in a fairly small group of people who have actually built a static analysis product. I believe in the technology. I also know the problems.
I think Semgrep made 2 fundamentally clever decisions:
2/