I made a tool that in our blind testing bested Semgrep. It is NOT AI based, it only has it for remediation recommendations. I have put our deep code scans of popular open source repos online so they can access them and fix the potential issues within their code logic. These do not constitute confirmed vulnerabilities. If not checked, they may be come them. Node.js, PHP, Python and the Linux Kernel scans available for download and review.