Show HN: Naptrace – find structural twins of a CVE in your codebase (github.com)

this looks useful. curious how you detect structural twins - ast-level matching or something deeper? also, does it work cross-language or is it tuned for specific ones