Open Source Drama: Opengrep Forks Semgrep Amidst Code-Scanning Kerfuffle!

Opengrep emerges as a fork of Semgrep, aiming to restore advanced features and create an open-source rule database. Backed by nine application security firms, the project addresses limitations introduced by Semgrep’s shift to a paid model. While some criticize the move, Opengrep promises a more feature-rich, community-driven code-scanning engine.

Pro Dashboard

Hot Take:

In a twist that’s more dramatic than a soap opera, nine companies have decided they’re not happy with just being Semgrep users — they want to be Semgrep’s ex! The new project, dubbed Opengrep, is the tech equivalent of a break-up album. Clearly, they’re saying, “We loved you, Semgrep, but you’ve changed.” It’s the ultimate plot twist: who knew code scanning needed its own spin-off?

Key Points:

  • Nine companies have forked Semgrep to create Opengrep, aiming to restore advanced features.
  • Opengrep seeks to maintain a neutral open source project, free from single-vendor control.
  • The fork resulted from Semgrep moving capabilities to its paid version, sparking community concerns.
  • Critics argue this move is part of a trend of companies exploiting open source for profit.
  • Opengrep promises to be more feature-rich and maintain community collaboration.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?