semgrep

Install command: 
brew install semgrep

Easily detect and prevent bugs and anti-patterns in your codebase

https://semgrep.dev

License: LGPL-2.1-only

Development: Pull requests

Formula JSON API: /api/formula/semgrep.json

Formula code: semgrep.rb on GitHub

Bottle (binary package) installation support provided for:

macOS on
Apple Silicon		 golden gate ✅
tahoe ✅
sequoia ✅
Linux ARM64 ✅
x86_64 ✅

Current versions:

stable ✅ 1.182.0
head ⚡️ HEAD

Depends on:

certifi 2026.10.23 Mozilla CA bundle for Python
cryptography 50.0.2 Cryptographic recipes and primitives for Python
dwarfutils 2.3.3 Dump and produce DWARF debug information in ELF objects
gmp 6.3.0 GNU multiple precision arithmetic library
libev 4.33 Asynchronous event library
pcre2 10.49 Perl compatible regular expressions library with a new API
pydantic 2.14.1 Data validation using Python type hints
python@3.15 3.15.2 Interpreted, interactive, object-oriented programming language
rpds-py 2026.9.1 Python bindings to Rust's persistent data structures
sqlite 3.54.1 Command-line interface for SQLite
tree-sitter 0.27.1 Incremental parsing library
zstd 1.5.7 Zstandard is a real-time compression algorithm

Depends on when building from source:

ocaml 5.5.2 General purpose programming language in the ML family
opam 2.6.1 OCaml package manager
pkgconf 3.0.10 Package compiler and linker metadata toolkit

Uses from macOS: rsync (build), curl

Binaries: pysemgrep, semgrep

Analytics:

30 days90 days365 days
Installs7,69117,61073,742
Installs (--HEAD)1336115
Installs on Request7,68517,59373,682
Installs on Request (--HEAD)1336115
Build Errors42

Known vulnerabilities in the current version:

GHSA-xcq7-p3pf-p88h (medium) OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api
GHSA-84m7-p3x7-pcfv (high) MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhau...

Data from Homebrew/advisory-database. Run brew vulns semgrep for a live check.