What is SAST, what does deeper SAST mean, and how does this apply to your JavaScript and TypeScript applications?