Search tools, frameworks, libraries, categories and domains
Pick up to four tools and compare adoption, momentum and maintenance at a glance. The crown marks the leader in each row.
| Metric | Bandit | CodeQL | Semgrep | SonarQube |
|---|---|---|---|---|
| Stars | 8.4k | 10.3k | 17.5k | 11.2k |
| Weekly downloads | 7M | n/a | 5.6M | n/a |
| Download growth | +23% | n/a | +29% | n/a |
| Popularity score | 78/100 | 73/100 | 80/100 | 74/100 |
| Forks | 876 | 2.1k | 1.2k | 2.2k |
| Open issues | 266 | 1.5k | 990 | 1 |
| Last commit | 1w ago | 2d ago | 6d ago | 1d ago |
| Latest version | 1.9.4Feb 25, 2026 | n/a | 1.185.0Nov 10, 2026 | n/a |
| License | Apache-2.0 | MIT | LGPL-2.1 | LGPL-3.0 |
| First released | 2018 | 2018 | 2019 | 2011 |
| Signals | None | Popular | Popular | Popular |
| Listed in | Security & Identity › SAST & code scanning | Security & Identity › SAST & code scanning | Security & Identity › SAST & code scanning | Testing & QA › Coverage, Reporting & Test AnalyticsSecurity & Identity › SAST & code scanning |
Hover for exact values; switch to log scale for tools of very different sizes. Not shown (no comparable download data): CodeQL, SonarQube.