Package profile

semgrep

Summary: Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Author: "Semgrep Inc." <support@semgrep.com>
License: LGPL-2.1-or-later
Homepage: https://semgrep.dev
Documentation: https://semgrep.dev/docs
Source: https://github.com/semgrep/semgrep
Number of releases: 353
First release: 0.6.0 on 2020-05-06
Latest release: 1.174.0 on 2026-08-20
Latest release size: 43.4 MB (wheel)

Source: ClickPy

Semgrep has 27 dependencies, 0 of which optional.

checkovInfrastructure as code static analysis
banditSecurity oriented static analyser for python code.
lizardA code analyzer without caring the C/C++ header files. It works with Java, C/C++, JavaScript, Python, Ruby, Swift, Objective C. Metrics includes cyclomatic complexity number etc.
flake8the modular source code checker: pep8 pyflakes and co
whatthepatchA patch parsing and application library.
about-timeEasily measure timing and throughput of code blocks, with beautiful human friendly representations.
benigetExtract semantic information about static Python code