Open-source automated refactoring ecosystem stewarded by Moderne, applying deterministic recipes to a lossless semantic tree model of source code.
OpenRewrite models source code as a Lossless Semantic Tree that preserves formatting, comments, and type bindings, then applies rules-based recipes — written in YAML, Refaster templates, or Java — that rewrite the tree so the same recipe produces the same output on every run. Maven and Gradle plugins run recipes one repository at a time; the project originally focused on Java and has added support for other languages including Kotlin, Groovy, Python, C#, JavaScript, TypeScript, Go, and Scala.
Jonathan Schneider created OpenRewrite at Netflix, and Moderne now manages the project as its primary maintainer. Licensing in 2026 is tiered: an Apache 2.0-licensed core with foundational Java recipes, source-available recipes, and proprietary recipes and languages for customers, while coordinated multi-repository change with pull-request orchestration and audit trails is the enterprise route via the commercial Moderne platform.
Codemod
Codemod — Code intelligence and automation platform
codemod.com
Semgrep
Semgrep Code
semgrep.dev
Inria
Spoon
inria.fr
| Attribute | OpenRewrite | Codemod — Code intelligence and automation platform | Semgrep Code | Spoon | |
|---|---|---|---|---|---|
| Provider | | | | | |
| Founded | 2020 | 2024 | 2017 | 1967 | |
| Sells To | Enterprise | B2B | Enterprise | — | |
| Pricing Model | Recurring, Software | B2B Subscription | Recurring, SaaS | — | |
| Ownership | Venture-backed | Private | Private equity-backed, Venture-backed | Government-owned |
Provider
Founded 2020
Sells To Enterprise
Pricing Model Recurring, Software
Ownership Venture-backed
Provider
Founded 2024
Sells To B2B
Pricing Model B2B Subscription
Ownership Private
Provider
Founded 2017
Sells To Enterprise
Pricing Model Recurring, SaaS
Ownership Private equity-backed, Venture-backed
Provider
Founded 1967
Sells To —
Pricing Model —
Ownership Government-owned
Static analysis tool for Java that catches common programming mistakes at compile time.
Java development tools from the Eclipse Foundation: IDE plug-ins providing a Java compiler, debugger, and refactoring tools.
AI agent effectiveness layer that injects project context and verifies agent-written code in real time.
Early-access service that improves training data quality for coding LLMs to reduce bugs and security flaws.
AI security agent that hunts intent-based vulnerabilities such as broken access control and business logic flaws.
Autonomous agent that turns SonarQube backlogs into verified pull requests fixing technical debt at scale.
SonarQube add-on extending SAST and SCA to detect CVEs, malicious packages, and license risks with SBOM export.
Self-managed static code analysis platform for continuous inspection of code quality and security across the enterprise.
Declarative query language with a CLI for searching and modifying source code at scale.
Static analysis tool for Java that catches common programming mistakes at compile time.
Java development tools from the Eclipse Foundation: IDE plug-ins providing a Java compiler, debugger, and refactoring tools.
CodeQL is GitHub's semantic code analysis engine for finding security vulnerabilities in source code.
Automated security enforcement for Git-based workflows.
Static application security testing product for finding and fixing vulnerabilities in source code.
AI agent effectiveness layer that injects project context and verifies agent-written code in real time.
Early-access service that improves training data quality for coding LLMs to reduce bugs and security flaws.
AI security agent that hunts intent-based vulnerabilities such as broken access control and business logic flaws.
Autonomous agent that turns SonarQube backlogs into verified pull requests fixing technical debt at scale.
SonarQube add-on extending SAST and SCA to detect CVEs, malicious packages, and license risks with SBOM export.
Self-managed static code analysis platform for continuous inspection of code quality and security across the enterprise.