Crate suggestion: RMA - Rust Monorepo Analyzer #7615
Description
Crate name: rma-cli
Repository: https://github.com/bumahkib7/rust-monorepo-analyzer
crates.io: https://crates.io/crates/rma-cli
Description:
RMA is a SAST (Static Application Security Testing) scanner that compiles 647 Semgrep community rules to native Rust matchers at build time using tree-sitter. Rules are embedded via
include_bytes!() for zero startup cost.
Why it's interesting:
- Compiles Semgrep YAML patterns → tree-sitter queries at build time
- 10x faster than Semgrep on large codebases
- 28 language support
- Interactive TUI for browsing findings
- Cross-file taint tracking
- MIT licensed
Install: cargo install rma-cli