Open-source alternatives to Snyk

One open-source project is offered as a replacement for Snyk: Semgrep. Running one yourself trades the subscription for your own hosting and upkeep, so the table below leads with what decides that trade: whether the project is alive, what its licence lets a business do, and whether there is a container command to start from.

• 
  Semgrep17,127 stars · weak copyleft · active

  Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

  Save

Which projects are offered against Snyk comes from opensourcealternative.to, re-read weekly. Every figure in the table is read from the project’s own repository. We have not run these projects, and we hold no price for Snyk. Browse every open-source alternative.