{"enrichment":{"capability":"Semgrep is a fast, open-source static analysis tool that searches code for bugs, security vulnerabilities, and coding standard violations across 30+ languages using patterns that resemble the code itself.","verdict":"Semgrep is actively maintained with zero known vulnerabilities and broad language support. Its copyleft LGPL-2.1-or-later license and medium install friction (27 runtime dependencies) are offset by comprehensive feature set for code quality and security analysis."},"id":"semgrep","links":{"html":"https://skillfed.io/packages/semgrep","md":"https://skillfed.io/packages/semgrep.md","pypi":"https://pypi.org/project/semgrep/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-13","license_spdx":"LGPL-2.1-or-later","license_treatment":"copyleft","name":"semgrep","python_support":"supports_current","summary":"Lightweight static analysis for many languages. Find bug variants with patterns that look like source code."},"popularity":{"tier":"top_1000"},"security":{"n_vulnerabilities":0},"version":"1.173.0"}