Consider how this tool compares to codeql

See https://github.com/crypto-com/cosmos-sdk-codeql which attempts to catch similar patterns like:

```
    - query: src/bech32-constants.ql
    - query: src/beginendblock-panic.ql
    - query: src/floating-point-ops.ql
    - query: src/map-iteration.ql
    - query: src/sensitive-import.ql
    - query: src/system-time.ql
```