---
id: semgrep
version: "1.173.0"
license: LGPL-2.1-or-later
license_treatment: copyleft
maintenance: active
---

# semgrep — Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

License: copyleft · Maintenance: active · Popularity: top 1,000 on PyPI

## Install

pip install semgrep
uv add semgrep
poetry add semgrep

## Description

<br />
<p align="center">
  <a href="https://semgrep.dev">
    <picture>
      <source media="(prefers-color-scheme: light)" srcset="images/semgrep-logo-light.svg">
      <source media="(prefers-color-scheme: dark)" srcset="images/semgrep-logo-dark.svg">
      <img src="https://raw.githubusercontent.com/semgrep/semgrep/develop/images/semgrep-logo-light.svg" height="100" alt="Semgrep logo"/>
    </picture>
  </a>
</p>
<h2 align="center">
  Code scanning at ludicrous speed.
</h2>
<p align="center">
  <a href="https://formulae.brew.sh/formula/semgrep">
    <img src="https://img.shields.io/homebrew/v/semgrep?style=flat-square" alt="Homebrew" />
  </a>
  <a href="https://pypi.org/project/semgrep/">
    <img alt="PyPI" src="https://img.shields.io/pypi/v/semgrep?style=flat-square&color=blue">
  </a>
  <a href="https://semgrep.dev/docs/">
      <img src="https://img.shields.io/badge/docs-semgrep.dev-purple?style=flat-square" alt="Documentation" />
  </a>
  <a href="https://go.semgrep.dev/slack">
    <img src="https://img.shields.io/badge/slack-3.5k%20members-green?style=flat-square" alt="Join Semgrep community Slack" />
  </a>
  <a...

## AI interpretation — verify before relying

Semgrep is a fast, open-source static analysis tool that searches code for bugs, security vulnerabilities, and coding standard violations across 30+ languages using patterns that resemble the code itself.

Verdict: Semgrep is actively maintained with zero known vulnerabilities and broad language support. Its copyleft LGPL-2.1-or-later license and medium install friction (27 runtime dependencies) are offset by comprehensive feature set for code quality and security analysis.

[View on SkillFed](https://skillfed.io/packages/semgrep) · [View on PyPI](https://pypi.org/project/semgrep/)