generated: '2026-10-03' method: probed generator: harvest-packages.py source: registry metadata endpoints (registry.npmjs.org, pypi.org, rubygems.org, api.nuget.org, packagist.org, crates.io) ownership_rule: 'official: true only when the registry metadata (homepage, repository, author, URLs) names the provider''s domain (finops/semgrep-finops.yml, linkedin.com, plans/semgrep-plans-pricing.yml, rate-limits/semgrep-rate-limits.yml, security/semgrep-domain-security.yml, security/semgrep-trust-center.yml, security/semgrep-vulnerability-disclosure.yml, semgrep.dev) or its accepted GitHub org.' packages: - name: semgrep registry: pypi url: https://pypi.org/project/semgrep/ language: Python official: true version: 1.179.0 published: '2026-10-02' evidence: metadata names semgrep.dev - name: semgrep registry: rubygems url: https://rubygems.org/gems/semgrep language: Ruby official: true version: 0.0.1 published: '2020-12-16' evidence: metadata names semgrep.dev - name: semgrep registry: npm url: https://www.npmjs.com/package/semgrep language: JavaScript official: false version: 0.0.1 published: '2020-04-16' evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org' - name: semgrep registry: nuget url: https://www.nuget.org/packages/semgrep language: C# official: false version: 1.0.0 published: null evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'