Reek vs Semgrep Supply Chain
Reek
github.com
Semgrep Supply Chain
semgrep.devSide by side
| Figure | Reek | Semgrep Supply Chain |
|---|---|---|
| Price from | Free | $30/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 3 |
| Spec score · Ruby Static Analysis Tools | 8.1 (#6) | 8.2 (#4) |
| Founded | 2009 | 2017 |
| Integrations | The README lists editor integrations for Vim, TextMate, Atom, SublimeLinter, VS Code, and Emacs. | Semgrep lists GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, and Buildkite among its CI integrations, with Slack, email, webhooks, VS Code, and IntelliJ also listed. |
| Purpose | Reek examines Ruby classes, modules, and methods and reports code smells. | Semgrep Supply Chain detects vulnerabilities in open-source dependencies, blocks malware, and provides codebase-aware reachability analysis and upgrade guidance. |
Plans
Semgrep Supply Chain
- Free EditionFree
- Teams — Supply Chain$30 a month
- EnterprisePriced on request
In their own words
Semgrep Supply Chain
Semgrep Supply Chain has no write-up on Specifiction yet; its figures are above.