open-source static analysis tool for finding security vulnerabilities

Nice system but quick question: how does this compare to something like Semgrep? Semgrep also does tree sitter based pattern matching and has taint tracking now. Is the main difference the rule engine, performance, or something else? Always interested in more options in this space but the "open source SAST" field is getting crowded.

[dead]