weggli-rs/weggli

Health v2 · maintenance only

Adoption not part of the score

2492 stars · 143 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

weggli is a fast semantic search tool for C and C++ codebases that performs pattern matching on abstract syntax trees using a query language resembling C/C++ code. It is designed for security researchers to interactively identify interesting functionality in large codebases without needing to build the software.

Use cases

• find memcpy calls writing into stack buffers in C code
• search large C++ codebases for vulnerable code patterns
• grep-like semantic search over source code without building the project
• identify interesting functionality during security audits
• find code patterns matching a C-like query in incomplete sources
• quickly locate uses of dangerous APIs in a codebase

When to choose

• you need fast, interactive AST-based search over C or C++ code
• you cannot build the target software or sources are incomplete
• you want first-class support for modern C++ constructs like lambdas and range-based for loops
• you are doing security research or code review on large codebases

When to avoid

• you need taint analysis or full dataflow analysis rather than pattern matching
• you need to search languages other than C and C++
• you want a CI-enforced policy engine like Semgrep with rule management

Facets

cli-tool · maturity active

search-engine parser developer-tools security developer-tools parsers windows cli rust static-analysis code-search ast-pattern-matching c cpp vulnerability-research semgrep-alternative command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="weggli-rs/weggli")