GitHub CodeQL vs Ore
GitHub CodeQL
codeql.github.com
Ore
ore.spongepowered.orgSide by side
| Figure | GitHub CodeQL | Ore |
|---|---|---|
| Price from | $30/mo | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | — | Yes |
| Self-hosted | Yes | — |
| Plans published | 5 | 0 |
| Spec score · Minecraft Plugin Repositories | 8.8 (#2) | 7.2 (#15) |
| Purpose | CodeQL is a language and toolchain for code analysis that treats code as data. | Ore is a plugin hosting repository where creators share Sponge plugins and Forge mods. |
Plans
GitHub CodeQL
- Free for research and open sourceFree
- GitHub Code Security$30 a month
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanningPrice not published
In their own words
GitHub CodeQL
GitHub CodeQL has no write-up on Specifiction yet; its figures are above.
Ore
Ore is a free, open-source web and API repository for sharing Sponge plugins and Forge mods. Developers receive project pages where users can download releases, read available documentation, and find support information; the download control selects the newest release. A JSON REST API exposes indexed projects and versions. Uploads enter staff review, and Ore warns users before downloads that have not cleared review. Submissions must be PGP-signed, which the documentation says helps verify uploader identity. Two-factor authentication for Sponge accounts is recommended but not required. Projects may not be sold, unlock paid features, or include advertisements, and JAR files must contain an mcmod.info descriptor with modid, name, and version. External connections must be documented and generally configurable and disabled by default. Projects downloading and executing code receive warnings, with rules requiring hash checks, HTTPS, and documentation. Users remain responsible for system security and downloaded content.