see https://semgrep.dev/docs/status/#maturity-definitions
