GitHub, an American company that provides hosting for software development, agreed to acquire Semmle, a code analysis tool that helps developers and security researchers discover potential vulnerabilities in their code. Financial terms were not disclosed. “GitHub is the one place where the community meets, where security experts and open-source maintainers collaborate, and where the consumers of open source find their building blocks,” says Semmle CEO and co-founder Oege De Moor. “GitHub’s recent moves to secure the ecosystem (with maintainer security advisories, automated security fixes, token scanning and many other advances in secure development) are all pieces of the same puzzle. The Semmle vision and technology belong at GitHub.”