Outbound Link Summary:
2 years ago
Lightweight static analysis for many languages.
Semgrep is a fast, open-source, static analysis engine for finding bugs, detecting vulnerabilities in third-party dependencies, and enforcing code standards.