Skipper
Skipper patches its second filter advisory in a week, this one in the OPA request-body filter.
Comparison · Infra & APIs
Gadget vs Semgrep
A side-by-side editorial comparison of Gadget and Semgrep — release velocity, themes, recent moves, and the top alternatives to consider.
Gadget vs Semgrep: at a glance
What is Gadget?
Gadget keeps its Shopify app platform in lockstep with Shopify's own release train.
Gadget is a full-stack development platform for building Shopify apps, and its changelog reads as steady platform maintenance: tracking new Shopify API versions, adopting Polaris web components, and hardening its own infrastructure. Recent work spans access-control UX, database rate-limiting, and a logging-backend migration. The pace is incremental with no single headline feature.
What is Semgrep?
Semgrep adds Objective-C as an alpha target, its first new language since Dart went GA.
Semgrep ships weekly on two tracks. Supply Chain added Bazel Maven workspaces in 1.177, Bun lockfiles in 1.179 and unpinned Python requirements in 1.181. The matcher promoted Dart to GA in 1.180. 1.182 adds Objective-C (alpha) with search- and taint-mode rules, and updates the C# Pro, Terraform HCL and Lua grammars.
Gadget vs Semgrep: editorial side-by-side
Gadget
0.0INFRA · APIS
Gadget keeps its Shopify app platform in lockstep with Shopify's own release train.
◆ Current state
Gadget is a full-stack development platform for building Shopify apps, and its changelog reads as steady platform maintenance: tracking new Shopify API versions, adopting Polaris web components, and hardening its own infrastructure. Recent work spans access-control UX, database rate-limiting, and a logging-backend migration. The pace is incremental with no single headline feature.
◆ Where it's heading
Two threads run through the feed: staying current with Shopify (API 2026-04, expiring offline tokens, TOML as the source of truth) and tightening platform reliability (progressive DB-query charging, surge-threshold visibility, a Loki-to-ClickHouse logging move). Gadget's roadmap is effectively coupled to Shopify's — its value is absorbing that churn so app builders don't have to.
◆ Prediction
Expect continued fast-follow support for the next Shopify API version and further reliability and observability work; the ClickHouse migration suggests more logging and metrics tooling is likely next.
Semgrep
5.0INFRA · APIS
Semgrep adds Objective-C as an alpha target, its first new language since Dart went GA.
◆ Current state
Semgrep ships weekly on two tracks. Supply Chain added Bazel Maven workspaces in 1.177, Bun lockfiles in 1.179 and unpinned Python requirements in 1.181. The matcher promoted Dart to GA in 1.180. 1.182 adds Objective-C (alpha) with search- and taint-mode rules, and updates the C# Pro, Terraform HCL and Lua grammars.
◆ Where it's heading
Language coverage is widening toward Apple-platform code, where .m files have so far sat outside Semgrep's rules, and Objective-C++ is promised separately. On the dependency side, Python requirements handling keeps moving toward how people write manifests by hand rather than how pip-compile emits them.
◆ Prediction
Expect Objective-C++ (.mm) support next, as the 1.182 notes say, and Objective-C moving out of alpha. The open item from 1.181, turning unpinned Python deps into findings, has no date yet.
Alternatives to Gadget and Semgrep
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Gadget or Semgrep.
Aviator
Aviator moves from merging code to judging it: Verify checks PRs against their stated intent.
Infisical
Infisical stores PAM session recordings in S3 and backs internal CAs with AWS KMS keys.
Apache Airflow
Airflow 3.4.0 reaches its second beta a day after the common-ai provider hit 1.0.
ESPHome
ESPHome adds a sixth 2026.10 beta, one more than 2026.9 needed before its .0.
Currents
Currents opens every project on a health verdict: trend, state, and what to fix first.
See all Gadget alternatives → · See all Semgrep alternatives →
Recent activity from Gadget and Semgrep
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 2d agoSemgrepObjective-C alpha support; C#, Terraform and Lua grammars updated
- 8d agoSemgrepSupply Chain inventories unpinned Python requirements
- 15d agoSemgrepDart reaches GA; QL language support removed
- 21d agoSemgrepSupply Chain adds Bun bun.lock parsing
- 29d agoSemgrepTree-sitter runtime bump and Windows hang fix
- 1mo agoSemgrepNative Supply Chain support for Bazel workspaces ⚡
- 5mo agoGadgetDrag-and-drop role reordering on permissions page
- 5mo agoGadgetProgressive charging for long-running DB queries
- 6mo agoGadgetNew logging syntax and commands due to ClickHouse logs migration
- 6mo agoGadgetSurge threshold visualization added to ops dashboard
- 6mo agoGadgetSupport for Shopify expiring offline access tokens
- 6mo agoGadgetSupport for Shopify API version 2026-04
Frequently asked questions
What is the difference between Gadget and Semgrep?
They serve adjacent needs but don't currently overlap on shipped themes. Semgrep is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Gadget better than Semgrep?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Semgrep is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to Gadget?
Top Gadget alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Gadget alternatives" section above for the current picks, or visit /alternatives/gadget for the full list with editorial commentary on each.
What are the best alternatives to Semgrep?
Top Semgrep alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Semgrep alternatives" section above for the current picks, or visit /alternatives/semgrep for the full list with editorial commentary on each.