{"library":"semgrep","type":"library","category":null,"description":"Semgrep is a fast, open-source, static analysis engine for finding bugs, detecting vulnerabilities in third-party dependencies, and enforcing code standards across over 30 programming languages. It scans code locally, without uploading it to external servers by default. As of version 1.156.0, it is actively developed with frequent (often weekly) releases, offering both a free Community Edition and a commercial AppSec Platform with enhanced features.","language":"python","status":"active","version":"1.156.0","tags":["static analysis","security","code quality","linter","SAST","SCA"],"install":[{"cmd":"pip install semgrep","imports":["import subprocess"]}],"homepage":"https://semgrep.dev","github":"https://github.com/semgrep/semgrep","docs":"https://semgrep.dev/docs","changelog":"https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md","pypi":"https://pypi.org/project/semgrep/","npm":null,"openapi_spec":null,"status_page":null,"smithery":null,"compatibility":{"summary":{"python_range":"3.10–3.9","success_rate":100,"avg_install_s":14.5,"avg_import_s":0.02,"wheel_type":"wheel"},"url":"https://checklist.day/v1/registry/semgrep/compatibility"},"provenance":{"verified_status":"passing","verified_at":"Sun Jun 28","last_verified":"Sun Jun 28","next_check":"Tue Jul 28","install_tag":"verified"}}