Semgrep
A multilingual static-analysis tool and AppSec platform whose community engine runs local pattern, data-flow, and custom rules, with paid services adding cross-file, supply-chain, secret, and governance features.
Why it’s here
Teams can encode crash patterns, unsafe APIs, and local conventions as versioned rules that report precise locations before review across game backends, tools, and scripting repositories.
Best fit
Testing, performance, accessibility, and diagnostics expose friction before launch.
Before you commit
The community engine is LGPL-2.1, while official rules and cloud features have separate licenses and limits; review code or metadata transfer before managed scans or AI and manually triage findings.