Testing Free Semgrep: 10 Vulnerabilities, 3 Findings
In a test with Semgrep, 3 out of 10 vulnerabilities were found. Key insights and results are discussed.
We deliberately introduced 10 common vulnerabilities into a React and TypeScript app and ran free Semgrep against them. It identified 3 of the vulnerabilities. This outcome highlights the limitations of Semgrep and what free static analysis can realistically detect.