DataDog’s open source Python/npm package scanner had a big new release today:
TL;DR: Moving off Semgrep to Yara with a custom rules repo. Easy to use and get started scanning Python libraries. Worth a shot if you’re a big Python shop.
Shhhh
It might even be worth building into a plugin/skill for your enterprise-managed LLMs.