Package profile
semgrep
- Summary: Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- Author: "Semgrep Inc." <support@semgrep.com>
- License: LGPL-2.1-or-later
- Homepage: https://semgrep.dev
- Documentation: https://semgrep.dev/docs
- Source: https://github.com/semgrep/semgrep
- Number of releases: 298
- First release: 0.6.0 on 2020-05-06
- Latest release: 1.179.0 on 2026-10-02
- Latest release size: 43.8 MB (wheel)
Dependencies
Semgrep has 27 dependencies, 0 of which optional.Dependent packages
| Package | Optional | Group |
|---|---|---|
| contree-sdk | true | dev-security |
| fpdf2 | true | dev |
| inspect-evals | true | cyberseceval-4 |
| wagtail | true | testing |
Similar packages
- checkovInfrastructure as code static analysis
- banditSecurity oriented static analyser for python code.
- lizardA code analyzer without caring the C/C++ header files. It works with Java, C/C++, JavaScript, Python, Ruby, Swift, Objective C. Metrics includes cyclomatic complexity number etc.
- flake8the modular source code checker: pep8 pyflakes and co
- whatthepatchA patch parsing and application library.
- about-timeEasily measure timing and throughput of code blocks, with beautiful human friendly representations.
- benigetExtract semantic information about static Python code