Ross ROSS = Recommend OSS · open-source software intelligence for agents

opengrep/opengrep

Some data may be outdated — see provenance labels.

🔎 Static code analysis engine to find security issues in code. observed · 2026-09-24

github.com/opengrep/opengrep · OCaml · LGPL-2.1 (copyleft) observed · 2026-09-24

Health v2 · maintenance only

82/100

  • Activity 96
  • Release rhythm 82
  • Longevity 48
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 6.0
  • age_days: 675
  • days_rel: 43
  • days_push: 27
  • n_releases_24m: 67

Full methodology

Adoption not part of the score

3106 stars · 267 forks observed · 2026-09-24

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Opengrep is an open-source static application security testing (SAST) engine forked from Semgrep under LGPL-2.1, supporting pattern-based code search and taint analysis across 30+ languages. It is Semgrep-rule compatible and outputs JSON and SARIF for CI integration.

Use cases

  • find security vulnerabilities in source code
  • run static analysis in CI pipelines
  • search codebases with semantic grep patterns
  • perform taint analysis to trace untrusted input
  • scan code with existing Semgrep rules
  • generate SARIF reports for security findings

When to choose

  • you want a fully open-source SAST engine without commercial license restrictions
  • you already have Semgrep rules and want drop-in compatibility
  • you need taint analysis or language support missing from Semgrep CE (e.g., Visual Basic, Apex, Elixir)

When to avoid

  • you rely on Semgrep's proprietary platform features or commercial rules
  • you need dynamic analysis or runtime security testing rather than static analysis

Facets

cli-tool · maturity active

security vulnerability-scanning search-engine parser linter security developer-tools testing windows cli cross-platform sast static-analysis semgrep-fork taint-analysis code-search sarif appsec command-line linux macos

1 source

Member repositories

RepositoryRoleHealth v2
opengrep/opengrepmain82

For agents

markdown · JSON · MCP: product_card(name="opengrep/opengrep")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem