github.com/Corgea/Sighthound

i'll try it on my work code

yeah

but this seems more thorough

it's fine

dependabot is... something

haha

like dependabot but better

it might

if it's good

i wonder if it'll get popular

it's early days

but i might

not yet

anyone else using this?

cool

i'll check later

*their* github

wait

good idea

or check issues

might need to ask dev

readme doesn't say

idk

does it do semgrep rules?

still better than missing real ones

typical

ugh

all false positives though

nice

found 3 issues