bundler-audit vs Semgrep Supply Chain
bundler-audit
github.com
Semgrep Supply Chain
semgrep.devSide by side
| Figure | bundler-audit | Semgrep Supply Chain |
|---|---|---|
| Price from | Free | $30/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 3 |
| Spec score · Ruby Static Analysis Tools | 7.9 (#7) | 8.2 (#4) |
| Spec score · Software Composition Analysis Software | 7.9 (#24) | 8.1 (#17) |
| Founded | 2013 | 2017 |
| Purpose | bundler-audit provides patch-level verification for Bundler projects. | Semgrep Supply Chain detects vulnerabilities in open-source dependencies, blocks malware, and provides codebase-aware reachability analysis and upgrade guidance. |
Plans
Semgrep Supply Chain
- Free EditionFree
- Teams — Supply Chain$30 a month
- EnterprisePriced on request
In their own words
bundler-audit
bundler-audit has no write-up on Specifiction yet; its figures are above.
Semgrep Supply Chain
Semgrep Supply Chain has no write-up on Specifiction yet; its figures are above.