Open Source Surface

10% of the composite, when it applies 4 checks · 40 pointsconditional facet open_source

For providers whose product is itself open source ONLY: does the repository publish the maintainership surface a consumer needs in order to depend on it? A vulnerability-disclosure path, a documented contribution route, a published release history, and a stated code of conduct. Not applied to closed-source products — a company with no CONTRIBUTING.md is not deficient, it is differently shaped. Not applied where the repository could not be read, either: unreadable is not missing.

669providers scored on it

623score above zero

57.7mean sub-score

60.0median sub-score

159at 100

This facet is conditional. It is computed for every provider so its panel can render, but it enters the composite only where it applies — 669 of the 26,626 scored providers in the catalog. The counts on this page are over that population, not the whole catalog, and everyone else is neither measured against it nor penalised for it. The applicability rule and the composite arithmetic are on the rubric page.

How it is scored

4 checks worth 40 points, grouped by the artifact each one reads. A facet's sub-score is its awarded points normalized against the points that were actually applicable to that provider — a check needing an artifact the provider does not publish at all is N/A, and leaves both sides of the fraction.

Open Source Surface · open_source

Check	Rule	Points
Published vulnerability-disclosure pathWhere an integrator reports a vulnerability in the thing they just put into production. The rarest of the four at 35.0% and the one that most directly affects a consumer, which is why it carries the most points.	`a SECURITY policy is present on the provider's own product repository`	14
Documented contribution routeWhether the project is actually open to participation or merely published. 62.4% coverage.	`a CONTRIBUTING guide is present on the provider's own product repository`	10
Published release historyVersioned, dated artifacts — the thing a consumer checks before depending on a project. Commonest of the four at 76.0%, but priced above the code of conduct because it carries far more information about whether the project is maintained.	`the provider's own product repository publishes releases`	10
Stated code of conductA stated standard for participation. Priced lowest of the four despite being rarer than releases at 49.6%: it is the most template-prone signal in the set, frequently dropped in wholesale, and so says the least about the project that holds it.	`a CODE_OF_CONDUCT is present on the provider's own product repository`	6

How the catalog distributes on it

Every one of the 669 providers this facet is scored on, bucketed by sub-score.

90-100159 · 23.8%

75-89.965 · 9.7%

50-74.9207 · 30.9%

25-49.9182 · 27.2%

0.1-24.910 · 1.5%

046 · 6.9%

Top providers

The top 500 of 623 providers scoring above zero on this facet, ranked by facet sub-score, ties broken by composite.

1 Svix100.0 80.4exemplar 2 Appwrite100.0 80.1exemplar 3 Ghost100.0 75.6exemplar 4 Azure Kubernetes Service100.0 72.2exemplar 5 Gitea100.0 71.7exemplar 6 Hugging Face100.0 68.9exemplar 7 Microsoft Azure Functions100.0 68.8exemplar 8 WSO2100.0 67.9exemplar 9 Amazon FreeRTOS100.0 66.2strong 10 Appsmith100.0 66.1strong 11 Azure Service Bus100.0 65.8strong 12 Microsoft Azure Health Data Services100.0 65.4strong 13 GitHub Copilot100.0 64.1strong 14 Azure Databricks100.0 63.4strong 15 Kong100.0 62.0strong 16 Netcracker100.0 61.2strong 17 OpenZeppelin100.0 60.3strong 18 Microsoft SQL Server100.0 59.6strong 19 Azure Blob Storage100.0 59.1strong 20 Graphiant100.0 58.8strong 21 Microsoft Word100.0 58.5strong 22 Azure Log Analytics100.0 58.0strong 23 Hugging Face Transformers100.0 57.8strong 24 ZenML100.0 57.8strong 25 DataHub100.0 57.4strong 26 Mem0100.0 56.9strong 27 Cloudflare Queues100.0 56.2strong 28 Academy Software Foundation100.0 55.0strong 29 Nord Security100.0 54.8strong 30 Artillery100.0 54.7strong 31 Prefect100.0 53.7developing 32 Misskey100.0 53.4developing 33 Authelia100.0 52.8developing 34 Buoyant100.0 52.5developing 35 Cognee100.0 51.9developing 36 Etcd100.0 51.2developing 37 Kestra100.0 50.7developing 38 Pixie100.0 50.1developing 39 Knative100.0 49.9developing 40 NuGet100.0 49.8developing 41 Artifact Hub100.0 49.4developing 42 Contour100.0 48.9developing 43 Apache APISIX100.0 48.8developing 44 KEDA100.0 48.1developing 45 Apollo Config100.0 47.2developing 46 NGINX100.0 46.9developing 47 Argo Workflows100.0 46.3developing 48 Bagisto100.0 46.1developing 49 Longhorn100.0 46.0developing 50 Polymarket100.0 46.0developing 51 Trieve100.0 45.9developing 52 Cilium100.0 45.8developing 53 gRPC100.0 45.7developing 54 Optimism100.0 45.6developing 55 Quickwit100.0 45.5developing 56 Timoni100.0 45.4developing 57 Spring WebFlux100.0 45.3developing 58 Envoy100.0 45.3developing 59 CubeFS100.0 45.3developing 60 Ory100.0 45.2developing 61 Volcano100.0 45.2developing 62 Conductor100.0 44.9developing 63 Pixelfed100.0 44.9developing 64 KubeVirt100.0 44.5developing 65 Porter100.0 44.5developing 66 TypeScript100.0 44.4developing 67 Rook100.0 44.2developing 68 Apache Dubbo100.0 44.0developing 69 Apache Struts100.0 44.0developing 70 SPIRE100.0 43.7developing 71 Incus100.0 43.6developing 72 zkSync100.0 43.4developing 73 OpenWallet Foundation100.0 43.4developing 74 Kuma100.0 43.2developing 75 Zep100.0 43.2developing 76 API Dash100.0 43.0developing 77 Portainer100.0 42.9developing 78 Helm100.0 42.8developing 79 Apache Superset100.0 42.7developing 80 Ketch100.0 42.7developing 81 Weights & Biases100.0 42.6developing 82 Fluentd100.0 42.1developing 83 Apache JMeter100.0 42.0developing 84 Radius100.0 41.9developing 85 Aqua Security100.0 41.6developing 86 Apache Doris100.0 41.4developing 87 Node-RED100.0 41.4developing 88 Verdaccio100.0 40.8developing 89 Kubeflow Pipelines100.0 40.3developing 90 Kong AI Gateway100.0 40.2developing 91 StackRox100.0 39.6developing 92 Vitess100.0 39.5developing 93 OptScale100.0 39.4developing 94 Envoy Proxy100.0 39.1thin 95 KrakenD100.0 39.0thin 96 smolagents100.0 39.0thin 97 Chia Network100.0 38.8thin 98 Topaz100.0 38.8thin 99 Flatcar Container Linux100.0 38.4thin 100 OWASP ZAP100.0 38.4thin 101 Podman100.0 38.4thin 102 Carvel100.0 38.3thin 103 Apache CloudStack100.0 38.1thin 104 Kyverno100.0 37.8thin 105 Firecracker100.0 37.5thin 106 Azure Durable Functions100.0 37.1thin 107 Jaeger100.0 36.7thin 108 Spacemesh100.0 36.1thin 109 Frappe100.0 36.0thin 110 Cert-Manager100.0 35.7thin 111 io.net100.0 35.6thin 112 Notary Project100.0 35.4thin 113 Apache Thrift100.0 34.4thin 114 Apache DolphinScheduler100.0 34.4thin 115 Fluent Bit100.0 34.2thin 116 McKinsey & Company100.0 33.6thin 117 OneUptime100.0 33.3thin 118 TODO Group100.0 33.0thin 119 Schemathesis100.0 33.0thin 120 Moleculer100.0 32.6thin 121 Apache Maven100.0 32.5thin 122 TypeSpec100.0 32.2thin 123 WasmEdge100.0 32.2thin 124 Semgrep100.0 31.8thin 125 Fastify100.0 31.5thin 126 Spin100.0 31.1thin 127 Kratos100.0 31.1thin 128 BFE100.0 30.6thin 129 Storybook100.0 29.3thin 130 Score100.0 29.2thin 131 Reaction Commerce100.0 29.2thin 132 Meshery100.0 28.9thin 133 Better Auth100.0 28.6thin 134 Genie100.0 28.0thin 135 OpenTofu100.0 27.6thin 136 Buildah100.0 27.6thin 137 OpenEBS100.0 27.4thin 138 NestJS100.0 27.3thin 139 Coral100.0 27.3thin 140 PokéAPI GraphQL100.0 27.2thin 141 Bridgecrew100.0 27.1thin 142 Containerfile100.0 26.8thin 143 Apache JMeter100.0 26.3thin 144 Azure CLI100.0 26.1emerging 145 Axios100.0 26.0emerging 146 Kata Containers100.0 25.9emerging 147 Quirrel100.0 25.8emerging 148 Node-Fetch100.0 25.5emerging 149 LF AI and Data100.0 25.4emerging 150 gVisor100.0 24.9emerging 151 kagent100.0 24.6emerging 152 Newton100.0 24.5emerging 153 Open Service Mesh100.0 24.5emerging 154 Werf100.0 24.5emerging 155 Gatsby100.0 21.7emerging 156 Granulate100.0 20.9emerging 157 Karate100.0 20.8emerging 158 DNN Software100.0 20.0emerging 159 Ratify100.0 17.6emerging 160 Calico85.0 71.0exemplar 161 Solana85.0 67.1exemplar 162 Barndoor85.0 65.1strong 163 LlamaParse85.0 59.1strong 164 Hatchet85.0 55.8strong 165 GoHarbor85.0 54.9strong 166 IOTA85.0 54.9strong 167 Reducto85.0 54.5strong 168 Tigera85.0 52.4developing 169 Runway85.0 52.3developing 170 turbopuffer85.0 51.4developing 171 Amika85.0 50.7developing 172 Daily85.0 49.7developing 173 Argo85.0 48.9developing 174 Val Town85.0 48.3developing 175 Nominatim85.0 47.0developing 176 tRPC85.0 46.9developing 177 Politecnico di Torino85.0 45.2developing 178 Weights and Biases85.0 43.4developing 179 OpenObserve85.0 42.8developing 180 Labelbox85.0 41.4developing 181 Zipkin85.0 41.0developing 182 Triton Inference Server85.0 39.9developing 183 Apache Zipkin85.0 39.1thin 184 Ambient Mesh85.0 35.0thin 185 XRP Ledger85.0 32.1thin 186 Port85.0 31.3thin 187 World (Worldcoin)85.0 30.3thin 188 Swagger85.0 30.1thin 189 PHP-FPM85.0 30.0thin 190 Garden85.0 28.9thin 191 NanoVMs85.0 26.5thin 192 OpenGamma85.0 21.8emerging 193 MyCrypto85.0 15.5emerging 194 Power Query75.0 80.5exemplar 195 Azure DevOps75.0 74.4exemplar 196 Canvas75.0 71.5exemplar 197 Oracle GoldenGate75.0 62.1strong 198 Azure Container Apps75.0 61.6strong 199 AgentGateway75.0 54.6strong 200 Bifrost75.0 50.2developing 201 Anomaly Detection75.0 47.7developing 202 Apache Kafka75.0 45.9developing 203 Apiman75.0 45.7developing 204 Apache Iceberg75.0 45.3developing 205 Apache OFBiz75.0 45.1developing 206 Apache Tomcat75.0 43.3developing 207 Apache Solr75.0 41.9developing 208 Apache HBase75.0 41.8developing 209 Apache Tomcat75.0 40.6developing 210 Apache Jena75.0 40.4developing 211 Apache NiFi75.0 40.3developing 212 Apache Helix75.0 39.8developing 213 Apache Spark75.0 39.5developing 214 Apache Storm75.0 38.5thin 215 Youki75.0 38.2thin 216 Einride75.0 37.8thin 217 Apache ActiveMQ75.0 35.5thin 218 Apache Tika75.0 35.1thin 219 Akri75.0 32.8thin 220 Apache Camel75.0 31.7thin 221 Apache TinkerPop75.0 31.6thin 222 Apache MXNet75.0 28.7thin 223 Streaming75.0 24.4emerging 224 Higress75.0 22.0emerging 225 Stoplight65.0 69.0exemplar 226 New Relic65.0 68.1exemplar 227 Netlify65.0 68.1exemplar 228 Auth065.0 67.9exemplar 229 Amazon SageMaker65.0 67.5exemplar 230 Dagster65.0 60.6strong 231 Amazon ECS65.0 57.8strong 232 Amazon Q65.0 57.6strong 233 Composio65.0 56.4strong 234 Lunar65.0 52.3developing 235 Mercado Pago65.0 51.0developing 236 Authzed65.0 49.7developing 237 Golioth65.0 49.7developing 238 Delta Lake65.0 48.2developing 239 Cloud Native Buildpacks65.0 47.8developing 240 Rancher65.0 46.6developing 241 IBM Language Translator65.0 46.2developing 242 Apache Airflow65.0 45.4developing 243 GOV.UK Pay65.0 45.4developing 244 Activiti65.0 44.8developing 245 Logto65.0 44.6developing 246 Orbit65.0 44.0developing 247 Kubernetes Services65.0 43.9developing 248 farmOS65.0 43.5developing 249 Label Studio65.0 43.2developing 250 Ansible Roles65.0 42.8developing 251 Milvus65.0 42.8developing 252 OpenTelemetry65.0 42.7developing 253 Jupyter Notebook65.0 42.4developing 254 TYPO365.0 42.4developing 255 Nuclei65.0 41.9developing 256 Openverse65.0 41.9developing 257 Jupyter Server65.0 41.2developing 258 SilverStripe65.0 40.4developing 259 JupyterLab65.0 40.0developing 260 Tempo65.0 39.8developing 261 Apache Druid65.0 39.1thin 262 Falco65.0 38.9thin 263 AI Gateway65.0 38.7thin 264 Microsoft Windows65.0 37.9thin 265 Ocelot65.0 37.6thin 266 Opentrons65.0 37.5thin 267 Spinnaker65.0 37.2thin 268 Appium65.0 36.7thin 269 Sigstore65.0 36.5thin 270 Spring Boot 365.0 36.4thin 271 Microsoft Entity Framework65.0 36.1thin 272 Zephyr Project65.0 36.0thin 273 Trivy65.0 35.3thin 274 Pact65.0 35.0thin 275 Kubeflow65.0 34.9thin 276 LangGraph65.0 34.6thin 277 Mockoon65.0 34.5thin 278 Spring Integration65.0 34.4thin 279 Tazama65.0 34.3thin 280 Presto Foundation65.0 34.1thin 281 Bytewax65.0 33.4thin 282 K665.0 32.6thin 283 Bigchaindb65.0 32.0thin 284 Riverlane65.0 31.9thin 285 Apache BookKeeper65.0 31.8thin 286 Phidata / Agno65.0 31.6thin 287 Xanadu65.0 31.2thin 288 Zcash65.0 31.1thin 289 Jupyter65.0 30.2thin 290 Agent Skills65.0 30.2thin 291 Grafast65.0 30.2thin 292 Loki65.0 30.1thin 293 Apache Arrow65.0 29.6thin 294 Cucumber65.0 29.4thin 295 Ansys65.0 29.4thin 296 Apache Beam65.0 29.1thin 297 pub.dev65.0 28.7thin 298 Apache Mahout65.0 28.2thin 299 Elk65.0 28.1thin 300 System Initiative65.0 28.0thin 301 Apache Lucene65.0 27.8thin 302 Smithy65.0 27.4thin 303 Legal & General65.0 27.1thin 304 Container Network Interface (CNI)65.0 26.6thin 305 Superduper65.0 25.9emerging 306 WhyLabs65.0 25.2emerging 307 Relay Compiler65.0 25.2emerging 308 Kitex65.0 24.9emerging 309 Apache SystemDS65.0 24.7emerging 310 Bean Validation65.0 23.8emerging 311 Docusaurus65.0 23.8emerging 312 Sails Co65.0 23.2emerging 313 Earthly65.0 23.1emerging 314 BDD (Behavior-Driven Development)65.0 22.5emerging 315 Habitat Lab65.0 21.6emerging 316 TLA Plus Foundation65.0 20.8emerging 317 AdaCore65.0 20.7emerging 318 HTTPX65.0 19.1emerging 319 Cartesi65.0 19.0emerging 320 Gherkin65.0 16.9emerging 321 Prism65.0 16.5emerging 322 Backpack60.0 54.9strong 323 Google Slides60.0 54.5strong 324 wasmCloud60.0 44.3developing 325 Hyperliquid60.0 37.9thin 326 Cosmos60.0 37.4thin 327 Cloud Custodian60.0 36.7thin 328 Band Protocol60.0 34.6thin 329 Context760.0 33.5thin 330 Tinyproxy60.0 29.2thin 331 Helium Network60.0 26.4thin 332 Openspec60.0 21.8emerging 333 Distroless60.0 20.5emerging 334 Ellipsis Labs60.0 17.7emerging 335 Newman60.0 16.7emerging 336 PsyOptions60.0 14.6emerging 337 Microsoft Power Platform APIs50.0 75.9exemplar 338 Notion50.0 60.8strong 339 PingCAP50.0 58.5strong 340 b.well50.0 56.7strong 341 PydanticAI50.0 55.1strong 342 Fusio50.0 53.2developing 343 Workday Report Writer50.0 53.0developing 344 Opik50.0 50.1developing 345 Red Hat 3scale50.0 49.6developing 346 OpenSERP50.0 49.3developing 347 SumUp50.0 49.1developing 348 Utrecht University50.0 47.3developing 349 Klavis AI50.0 47.2developing 350 WordPress50.0 45.3developing 351 Laminar50.0 45.3developing 352 StakPak50.0 44.5developing 353 SmartBear50.0 44.4developing 354 Spacelift50.0 44.2developing 355 AI21 Labs50.0 43.6developing 356 Nexus Mutual50.0 43.6developing 357 Automotive Grade Linux50.0 43.4developing 358 Apache Nutch50.0 42.7developing 359 HAProxy50.0 42.7developing 360 Evidently AI50.0 42.4developing 361 Safe (Gnosis Safe)50.0 42.3developing 362 United States Army Corps of Engineers50.0 41.9developing 363 GumGum50.0 40.6developing 364 Planet Labs50.0 40.1developing 365 Spring Boot50.0 40.0developing 366 Apache Knox50.0 39.8developing 367 CloudEvents50.0 39.6developing 368 Linkerd50.0 38.6thin 369 Doceree50.0 38.4thin 370 BRICK Schema50.0 38.4thin 371 Triplit50.0 37.8thin 372 MOSTLY AI50.0 37.5thin 373 Uptrace50.0 36.9thin 374 Finite State50.0 36.7thin 375 Axon Framework50.0 36.4thin 376 Apache HttpComponents50.0 35.9thin 377 Motley50.0 35.6thin 378 Apache Hive50.0 35.4thin 379 Apache CXF50.0 35.3thin 380 Eventbrite50.0 35.0thin 381 Vault1250.0 34.9thin 382 Apache Zeppelin50.0 34.6thin 383 RapiDoc50.0 34.1thin 384 Apache HTTP Server50.0 33.7thin 385 Emissary-Ingress50.0 32.4thin 386 AG250.0 31.8thin 387 pfSense50.0 31.8thin 388 Upwork50.0 31.6thin 389 Firecamp50.0 31.6thin 390 US Army Corps of Engineers50.0 31.2thin 391 SimpliVity50.0 30.7thin 392 DBOS50.0 30.4thin 393 TradingView50.0 30.2thin 394 Caddy50.0 29.7thin 395 Confident AI50.0 29.3thin 396 Audigent50.0 29.1thin 397 Hoverfly50.0 29.0thin 398 Apache Calcite50.0 28.8thin 399 Software Engineering Daily50.0 28.8thin 400 Grounded.tools50.0 28.3thin 401 Comet50.0 28.2thin 402 Pachyderm50.0 28.2thin 403 Apache Wicket50.0 27.8thin 404 Sozu50.0 27.7thin 405 Akita Software50.0 27.4thin 406 Apache Tapestry50.0 27.4thin 407 Events50.0 27.3thin 408 o1 Labs50.0 26.8thin 409 Flyte50.0 26.7thin 410 UCL50.0 26.6thin 411 Emdash50.0 26.0emerging 412 Deloitte50.0 25.4emerging 413 Vegeta50.0 25.2emerging 414 QuEra Computing50.0 23.9emerging 415 Templates50.0 23.9emerging 416 Zefchain50.0 23.9emerging 417 Service Mesh Interface (SMI)50.0 22.6emerging 418 2020 Police Brutality50.0 22.5emerging 419 Kratix50.0 22.5emerging 420 Element50.0 21.7emerging 421 Prompt Driven50.0 21.3emerging 422 Nameko50.0 20.8emerging 423 Extropic50.0 20.8emerging 424 Coasts50.0 20.5emerging 425 LUMICKS50.0 19.4emerging 426 MOSN50.0 18.7emerging 427 Hurl50.0 17.4emerging 428 Colibri50.0 17.0emerging 429 PartyDAO50.0 14.0emerging 430 Utopia50.0 12.3emerging 431 Viva Translate50.0 11.7emerging 432 Adobe Campaign40.0 74.9exemplar 433 Palo Alto Networks40.0 70.4exemplar 434 AWS Lambda40.0 68.2exemplar 435 Adobe Analytics40.0 65.9strong 436 Trakt40.0 56.4strong 437 Splunk40.0 54.0developing 438 WhatsApp40.0 51.4developing 439 Looker40.0 50.7developing 440 Bump.sh40.0 50.0developing 441 Stellar40.0 49.8developing 442 Bloomberg AIM40.0 49.7developing 443 Perforce40.0 48.5developing 444 CodeSandbox40.0 46.5developing 445 Cloudflare R240.0 43.9developing 446 Hey API40.0 43.9developing 447 SAP Concur40.0 43.0developing 448 Cloudflare KV40.0 42.9developing 449 Eversign40.0 42.5developing 450 Apache Ignite40.0 41.1developing 451 Apache CouchDB40.0 39.8developing 452 Saleor40.0 39.5developing 453 Spree Commerce40.0 38.8thin 454 Apache Kylin40.0 36.6thin 455 Apache Geode40.0 35.6thin 456 Apache Hudi40.0 34.7thin 457 Apache Curator40.0 34.0thin 458 Apache EventMesh40.0 33.7thin 459 SPIFFE40.0 33.5thin 460 Apache Guacamole40.0 32.8thin 461 Bloomberg Professional Service40.0 31.5thin 462 Apache Flume40.0 31.2thin 463 Apache Flink40.0 30.8thin 464 Angle40.0 29.9thin 465 Apache Mesos40.0 28.4thin 466 REST Client40.0 28.4thin 467 Genql40.0 27.3thin 468 Apache TVM40.0 25.6emerging 469 Apache Flink40.0 24.6emerging 470 Vector40.0 24.0emerging 471 5ire40.0 23.4emerging 472 Apache Libcloud40.0 23.2emerging 473 Apache Sling40.0 23.1emerging 474 Seneca40.0 20.3emerging 475 Merbridge40.0 18.3emerging 476 Neptune.ai40.0 18.1emerging 477 Fluid40.0 16.6emerging 478 Kubectl40.0 13.9emerging 479 Silk Labs40.0 13.8emerging 480 Open Mainframe Project40.0 13.6emerging 481 LF Broadband40.0 12.7emerging 482 Makani *40.0 11.9emerging 483 Cyware35.0 47.1developing 484 Squads35.0 41.2developing 485 Limit Break35.0 31.5thin 486 REST Assured35.0 30.3thin 487 Orange Business25.0 70.0exemplar 488 Heroic Labs25.0 67.5exemplar 489 Mailmodo25.0 64.0strong 490 Solo.io25.0 62.4strong 491 Buf25.0 61.4strong 492 WorkOS25.0 59.6strong 493 Hyperbolic25.0 59.4strong 494 APIFreaks - API Hub for Developers25.0 58.2strong 495 Figma25.0 57.9strong 496 Pocket Network25.0 57.3strong 497 Scryfall25.0 57.1strong 498 Aptible25.0 56.9strong 499 Nokia Network as Code25.0 56.5strong 500 Upvest25.0 55.4strong

Move this number. Every provider in the catalog is profiled from a public repository at github.com/api-evangelist/<provider>, and each check above names the exact artifact it reads. Publish the artifact, open a pull request, and the next scoring run picks it up — no gatekeeping and no fee. The full rubric is at apis.io/rating/, and the Influence plan is the fast lane if you would rather work your own listing through the API — remediation, projections and re-check requests.

Scored on rubric v0.22.0 across 26,626 providers · lists rebuilt 2026-09-21 · capped at the top 500 per page.

Open Source Surface

How it is scored

How the catalog distributes on it

Top providers

The other 8 facets