Just use Bandit or Semgrep

Hi,

Instead of creating yet another scanning tool (in order to spam repositories and get publicity), you could have used existing free and open source tools like [Bandit](https://github.com/PyCQA/bandit/commit/caae4eef975e49a8fea10a12327b088ce12e9981) or [Semgrep](https://github.com/trailofbits/semgrep-rules/blob/main/python/tarfile-extractall-traversal.yml).