{"id":2738,"date":"2025-01-31T18:19:00","date_gmt":"2025-01-31T18:19:00","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/security-tools-license-at-heart-of-breakup\/"},"modified":"2025-01-31T18:19:00","modified_gmt":"2025-01-31T18:19:00","slug":"security-tools-license-at-heart-of-breakup","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/security-tools-license-at-heart-of-breakup\/","title":{"rendered":"Security Tool’s License at Heart of Breakup"},"content":{"rendered":"\n<\/p>\n

Semgrep Forked by Nine Application Security Service Providers<\/strong><\/p>\n

A group of nine application security service providers announced they would "fork" the popular code-scanning project Semgrep, creating a new codebase, after a series of moves by the eponymous startup made it more difficult for the firms to use the open source software in their own products.<\/p>\n

Background of the Fork<\/strong><\/p>\n

The companies \u2014 Aikido Security, Arnica, Amplify Security, Endor Labs, Jit, Kodem, Legit Security, Mobb, and Orca Security \u2014 embarked on the initiative after Semgrep announced it had moved some capabilities of its open source engine into the startup’s paid version. Dubbed Opengrep, the new project remains under the same license as the Semgrep Community Edition \u2014 the Lesser GNU Public License (LGPL) \u2014 but will restore advanced features and the ability to export data in JSON and SARIF formats, as well as create an open source database of rules.<\/p>\n

Similar Forks in the Open Source Community<\/strong><\/p>\n

This is not the first time a fork has occurred in the open source community. For example, Elasticsearch was forked to create OpenSearch, which provides an open version of the Elasticsearch database. This move was made to give the community the ability to use an open version.<\/p>\n

Semgrep’s Response to the Fork<\/strong><\/p>\n

In Semgrep’s case, founder O’Malley argues that the company has an incentive to keep the Community Edition well-maintained and strong, while the Opengrep team has not demonstrated their product will be an improvement. Two parallel projects is never ideal, he says.<\/p>\n

Concerns About Forks in Open Source<\/strong><\/p>\n

"Multiple forks can create confusion, making it harder for individuals to know where to contribute and what\u2019s actively maintained," O’Malley says. "That\u2019s always a risk with fragmentation in open source. Our priority is keeping Semgrep CE strong, well-maintained, and growing. Developers and security engineers relying on it should feel confident that we’re committed to its long-term success and a thriving ecosystem."<\/p>\n\n
Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Semgrep Forked by Nine Application Security Service Providers A group of nine application security service providers announced they would "fork" the popular code-scanning project Semgrep, creating a new codebase, after…<\/p>\n","protected":false},"author":19,"featured_media":2739,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[],"class_list":["post-2738","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/01\/TippaPatt-software-developer-shutterstock.jpg","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/2738","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=2738"}],"version-history":[{"count":0,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/2738\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/2739"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=2738"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=2738"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=2738"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}