Have you been considering using a non-encumbered open source back-end beyond codeql? May be Atom+Chen, Joern or semgrep?