Open Source Drama: Opengrep Forks Semgrep Amidst Code-Scanning Kerfuffle!
Opengrep emerges as a fork of Semgrep, aiming to restore advanced features and create an open-source rule database. Backed by nine application security firms, the project addresses limitations introduced by Semgrep’s shift to a paid model. While some criticize the move, Opengrep promises a more feature-rich, community-driven code-scanning engine.

Hot Take:
In a twist that’s more dramatic than a soap opera, nine companies have decided they’re not happy with just being Semgrep users — they want to be Semgrep’s ex! The new project, dubbed Opengrep, is the tech equivalent of a break-up album. Clearly, they’re saying, “We loved you, Semgrep, but you’ve changed.” It’s the ultimate plot twist: who knew code scanning needed its own spin-off?
Key Points:
- Nine companies have forked Semgrep to create Opengrep, aiming to restore advanced features.
- Opengrep seeks to maintain a neutral open source project, free from single-vendor control.
- The fork resulted from Semgrep moving capabilities to its paid version, sparking community concerns.
- Critics argue this move is part of a trend of companies exploiting open source for profit.
- Opengrep promises to be more feature-rich and maintain community collaboration.
Already a member? Log in here