Open Source Surface

10% of the composite, when it applies 4 checks · 40 pointsconditional facet open_source

For providers whose product is itself open source ONLY: does the repository publish the maintainership surface a consumer needs in order to depend on it? A vulnerability-disclosure path, a documented contribution route, a published release history, and a stated code of conduct. Not applied to closed-source products — a company with no CONTRIBUTING.md is not deficient, it is differently shaped. Not applied where the repository could not be read, either: unreadable is not missing.

734providers scored on it

675score above zero

57.8mean sub-score

60.0median sub-score

177at 100

This facet is conditional. It is computed for every provider so its panel can render, but it enters the composite only where it applies — 734 of the 36,710 scored providers in the catalog. The counts on this page are over that population, not the whole catalog, and everyone else is neither measured against it nor penalised for it. The applicability rule and the composite arithmetic are on the rubric page.

How it is scored

4 checks worth 40 points, grouped by the artifact each one reads. A facet's sub-score is its awarded points normalized against the points that were actually applicable to that provider — a check needing an artifact the provider does not publish at all is N/A, and leaves both sides of the fraction.

Open Source Surface · open_source

Check	Rule	Points
Published vulnerability-disclosure pathWhere an integrator reports a vulnerability in the thing they just put into production. The rarest of the four at 35.0% and the one that most directly affects a consumer, which is why it carries the most points.	`a SECURITY policy is present on the provider's own product repository`	14
Documented contribution routeWhether the project is actually open to participation or merely published. 62.4% coverage.	`a CONTRIBUTING guide is present on the provider's own product repository`	10
Published release historyVersioned, dated artifacts — the thing a consumer checks before depending on a project. Commonest of the four at 76.0%, but priced above the code of conduct because it carries far more information about whether the project is maintained.	`the provider's own product repository publishes releases`	10
Stated code of conductA stated standard for participation. Priced lowest of the four despite being rarer than releases at 49.6%: it is the most template-prone signal in the set, frequently dropped in wholesale, and so says the least about the project that holds it.	`a CODE_OF_CONDUCT is present on the provider's own product repository`	6

How the catalog distributes on it

Every one of the 734 providers this facet is scored on, bucketed by sub-score.

90-100177 · 24.1%

75-89.971 · 9.7%

50-74.9231 · 31.5%

25-49.9185 · 25.2%

0.1-24.911 · 1.5%

059 · 8.0%

Top providers

The top 500 of 675 providers scoring above zero on this facet, ranked by facet sub-score, ties broken by composite.

1 WSO2100.0 84.4exemplar 2 Appwrite100.0 83.7exemplar 3 Ghost100.0 79.4exemplar 4 Svix100.0 74.5exemplar 5 Kong100.0 73.2exemplar 6 Azure Kubernetes Service100.0 72.6exemplar 7 Amazon FreeRTOS100.0 72.4exemplar 8 GitHub Copilot100.0 70.1exemplar 9 Gitea100.0 69.8exemplar 10 Microsoft Azure Functions100.0 68.5exemplar 11 Hugging Face100.0 68.1exemplar 12 Azure Service Bus100.0 68.0exemplar 13 Appsmith100.0 67.0exemplar 14 Graphiant100.0 65.2strong 15 Hugging Face Transformers100.0 64.3strong 16 Nord Security100.0 64.0strong 17 Azure Databricks100.0 63.6strong 18 Microsoft Word100.0 63.2strong 19 Netcracker100.0 62.8strong 20 Azure Log Analytics100.0 62.7strong 21 Academy Software Foundation100.0 62.5strong 22 Microsoft SQL Server100.0 59.9strong 23 Traefik Labs100.0 59.9strong 24 ZenML100.0 58.6strong 25 Portainer100.0 58.5strong 26 Artillery100.0 57.5strong 27 DataHub100.0 55.6strong 28 Azure Blob Storage100.0 55.5strong 29 Prefect100.0 55.4strong 30 Kestra100.0 54.1developing 31 Cognee100.0 53.3developing 32 Authelia100.0 53.1developing 33 Cloudflare Queues100.0 53.0developing 34 Mem0100.0 52.9developing 35 OpenZeppelin100.0 52.8developing 36 Buoyant100.0 52.6developing 37 Microsoft Azure Health Data Services100.0 52.5developing 38 NuGet100.0 51.9developing 39 Ory100.0 51.2developing 40 Artifact Hub100.0 49.1developing 41 Etcd100.0 48.5developing 42 Pixie100.0 47.3developing 43 Apache APISIX100.0 47.2developing 44 Knative100.0 47.1developing 45 Crossplane100.0 45.8developing 46 Weights & Biases100.0 45.7developing 47 KEDA100.0 45.6developing 48 NGINX100.0 45.6developing 49 Kiota100.0 45.0developing 50 API Dash100.0 44.6developing 51 Apollo Config100.0 44.4developing 52 Misskey100.0 44.4developing 53 Argo Workflows100.0 43.7developing 54 Longhorn100.0 43.5developing 55 CubeFS100.0 42.9developing 56 Envoy100.0 42.6developing 57 Cilium100.0 42.6developing 58 gRPC100.0 42.6developing 59 Timoni100.0 42.6developing 60 SPIRE100.0 42.4developing 61 Apache Struts100.0 42.3developing 62 Spring WebFlux100.0 42.2developing 63 Chaos Mesh100.0 42.2developing 64 Apache Dubbo100.0 41.5developing 65 Volcano100.0 41.4developing 66 Rook100.0 41.3developing 67 KubeVirt100.0 41.0developing 68 Porter100.0 41.0developing 69 Aqua Security100.0 40.8developing 70 Helm100.0 40.8developing 71 Kuma100.0 40.7developing 72 OpenWallet Foundation100.0 40.6developing 73 Conductor100.0 40.5developing 74 Apache Superset100.0 40.3developing 75 Incus100.0 40.3developing 76 Marqo100.0 40.3developing 77 Radius100.0 40.2developing 78 Trieve100.0 40.2developing 79 Contour100.0 40.0developing 80 Apache JMeter100.0 40.0developing 81 Chia Network100.0 40.0developing 82 Apache Doris100.0 39.7developing 83 CoreDNS100.0 39.6developing 84 Fluentd100.0 38.9thin 85 Kyverno100.0 38.9thin 86 Node-RED100.0 38.9thin 87 Polymarket100.0 38.8thin 88 TiKV100.0 38.2thin 89 Apache CloudStack100.0 38.0thin 90 Carvel100.0 37.2thin 91 Pixelfed100.0 37.2thin 92 StackRox100.0 37.1thin 93 Zep100.0 37.1thin 94 Kong AI Gateway100.0 37.0thin 95 Kubeflow Pipelines100.0 37.0thin 96 Optimism100.0 37.0thin 97 Orval100.0 37.0thin 98 Vitess100.0 36.4thin 99 Bagisto100.0 36.4thin 100 Promptfoo100.0 36.3thin 101 OptScale100.0 36.2thin 102 OWASP ZAP100.0 36.2thin 103 Verdaccio100.0 36.1thin 104 io.net100.0 35.9thin 105 Envoy Proxy100.0 35.9thin 106 Quickwit100.0 35.8thin 107 KrakenD100.0 35.7thin 108 Jaeger100.0 35.5thin 109 Flatcar Container Linux100.0 35.3thin 110 zkSync100.0 35.2thin 111 Spacemesh100.0 34.8thin 112 AutoRest100.0 34.7thin 113 Azure Durable Functions100.0 34.7thin 114 Podman100.0 34.3thin 115 Puma100.0 34.0thin 116 Ketch100.0 33.9thin 117 Firecracker100.0 33.6thin 118 CRI-O100.0 33.3thin 119 Frappe100.0 33.2thin 120 Cert-Manager100.0 33.1thin 121 Notary Project100.0 32.8thin 122 Apache Thrift100.0 32.7thin 123 Apache DolphinScheduler100.0 32.6thin 124 Runc100.0 32.5thin 125 MockServer100.0 32.4thin 126 Topaz100.0 31.8thin 127 BFE100.0 31.0thin 128 Apache Maven100.0 31.0thin 129 Schemathesis100.0 30.4thin 130 Fluent Bit100.0 30.3thin 131 OneUptime100.0 30.2thin 132 Voiden100.0 29.9thin 133 WasmEdge100.0 29.8thin 134 TypeSpec100.0 29.7thin 135 Moleculer100.0 29.6thin 136 smolagents100.0 29.6thin 137 OpenLLMetry100.0 29.1thin 138 Spin100.0 28.7thin 139 StarRocks100.0 28.6thin 140 Reaction Commerce100.0 28.5thin 141 Meshery100.0 28.5thin 142 Fastify100.0 28.2thin 143 DuckDB100.0 28.1thin 144 Kratos100.0 27.9thin 145 Buildah100.0 27.6thin 146 Storybook100.0 27.0thin 147 PokéAPI GraphQL100.0 27.0thin 148 Score100.0 26.7thin 149 Genie100.0 26.4thin 150 McKinsey & Company100.0 26.4thin 151 Semgrep100.0 26.3thin 152 TODO Group100.0 26.2thin 153 Coral100.0 25.8emerging 154 Bridgecrew100.0 25.6emerging 155 OpenTofu100.0 25.0emerging 156 OpenEBS100.0 24.4emerging 157 Apache JMeter100.0 24.2emerging 158 NestJS100.0 24.1emerging 159 Azure CLI100.0 24.0emerging 160 Ragas100.0 23.1emerging 161 Axios100.0 23.0emerging 162 Werf100.0 23.0emerging 163 Kata Containers100.0 22.9emerging 164 gVisor100.0 22.8emerging 165 Quirrel100.0 22.8emerging 166 Node-Fetch100.0 22.5emerging 167 LF AI and Data100.0 22.4emerging 168 Better Auth100.0 21.8emerging 169 kagent100.0 21.6emerging 170 Newton100.0 21.5emerging 171 Open Service Mesh100.0 21.5emerging 172 Gatsby100.0 20.5emerging 173 Granulate100.0 19.3emerging 174 Telepresence100.0 18.9emerging 175 Ratify100.0 18.8emerging 176 DNN Software100.0 18.5emerging 177 Karate100.0 17.9emerging 178 Calico85.0 64.9strong 179 GoHarbor85.0 62.1strong 180 Tigera85.0 61.2strong 181 Solana85.0 59.9strong 182 Amika85.0 59.0strong 183 Barndoor85.0 59.0strong 184 Hatchet85.0 57.9strong 185 LlamaParse85.0 54.9strong 186 Vespa85.0 52.5developing 187 Reducto85.0 51.2developing 188 Runway85.0 49.9developing 189 tRPC85.0 49.6developing 190 Daily85.0 47.7developing 191 turbopuffer85.0 47.1developing 192 IOTA85.0 47.0developing 193 Argo85.0 46.3developing 194 Val Town85.0 45.4developing 195 Nominatim85.0 42.4developing 196 Port85.0 41.5developing 197 OpenObserve85.0 40.3developing 198 Politecnico di Torino85.0 37.9thin 199 Zipkin85.0 37.5thin 200 Triton Inference Server85.0 36.7thin 201 MLflow85.0 36.7thin 202 Weights and Biases85.0 36.4thin 203 Ogen85.0 36.2thin 204 Apache Zipkin85.0 35.7thin 205 Labelbox85.0 35.4thin 206 Ambient Mesh85.0 33.8thin 207 Ray85.0 29.8thin 208 PHP-FPM85.0 28.2thin 209 XRP Ledger85.0 27.5thin 210 NanoVMs85.0 24.9emerging 211 Locust85.0 23.8emerging 212 OpenGamma85.0 23.6emerging 213 World (Worldcoin)85.0 23.4emerging 214 Garden85.0 21.2emerging 215 Mockito85.0 20.8emerging 216 MyCrypto85.0 16.7emerging 217 Azure DevOps75.0 76.8exemplar 218 Power Query75.0 75.8exemplar 219 Canvas75.0 68.9exemplar 220 Oracle GoldenGate75.0 62.5strong 221 Azure Container Apps75.0 59.8strong 222 Bifrost75.0 59.0strong 223 AgentGateway75.0 52.9developing 224 Anomaly Detection75.0 51.9developing 225 Apache Kafka75.0 47.7developing 226 Apache Iceberg75.0 46.9developing 227 Apiman75.0 44.2developing 228 Apache OFBiz75.0 42.9developing 229 Apache Solr75.0 40.2developing 230 Apache HBase75.0 39.2thin 231 JupyterHub75.0 39.1thin 232 Apache NiFi75.0 39.0thin 233 Apache Tomcat75.0 38.9thin 234 Apache Jena75.0 38.4thin 235 Einride75.0 38.3thin 236 Apache Helix75.0 37.1thin 237 Apache Tomcat75.0 37.1thin 238 Apache Cassandra75.0 36.7thin 239 Apache Spark75.0 36.6thin 240 Apache Storm75.0 36.2thin 241 Youki75.0 35.5thin 242 Apache ActiveMQ75.0 35.4thin 243 Akri75.0 33.1thin 244 Apache Tika75.0 32.7thin 245 Apache Camel75.0 30.8thin 246 Apache TinkerPop75.0 30.1thin 247 Apache MXNet75.0 27.0thin 248 Higress75.0 19.0emerging 249 New Relic65.0 76.7exemplar 250 Stoplight65.0 76.3exemplar 251 Auth065.0 72.1exemplar 252 Netlify65.0 72.0exemplar 253 Amazon SageMaker65.0 69.9exemplar 254 Amazon Q65.0 67.3exemplar 255 Amazon ECS65.0 62.1strong 256 Composio65.0 61.5strong 257 Dagster65.0 60.1strong 258 Dagger65.0 57.1strong 259 Swagger Codegen65.0 55.7strong 260 Cerbos65.0 48.4developing 261 Cloud Native Buildpacks65.0 47.7developing 262 Lunar65.0 47.5developing 263 Golioth65.0 46.9developing 264 Authzed65.0 46.6developing 265 Delta Lake65.0 46.6developing 266 Apache Airflow65.0 46.3developing 267 IBM Language Translator65.0 46.0developing 268 Logto65.0 44.2developing 269 Rancher65.0 42.6developing 270 Activiti65.0 42.3developing 271 Kubernetes Services65.0 42.1developing 272 Mercado Pago65.0 41.8developing 273 Nuclei65.0 41.7developing 274 Label Studio65.0 41.6developing 275 Ansible Roles65.0 41.3developing 276 Cosign65.0 41.1developing 277 Jupyter Notebook65.0 40.6developing 278 OpenAPI Generator65.0 40.5developing 279 GOV.UK Pay65.0 40.4developing 280 JupyterLab65.0 39.5developing 281 Milvus65.0 38.7thin 282 OpenTelemetry65.0 38.6thin 283 Jupyter Server65.0 38.5thin 284 farmOS65.0 38.2thin 285 Docling65.0 38.0thin 286 Apache Druid65.0 37.9thin 287 Spring Security65.0 37.7thin 288 Tempo65.0 37.5thin 289 AI Gateway65.0 37.4thin 290 Microsoft Windows65.0 36.3thin 291 Spinnaker65.0 36.0thin 292 TYPO365.0 35.8thin 293 Zephyr Project65.0 35.7thin 294 Falco65.0 35.4thin 295 Spring Batch65.0 35.4thin 296 Appium65.0 34.1thin 297 Openverse65.0 33.8thin 298 LangGraph65.0 33.5thin 299 Ocelot65.0 33.5thin 300 Riverlane65.0 33.4thin 301 Spring Integration65.0 33.3thin 302 Sigstore65.0 33.1thin 303 Trivy65.0 32.8thin 304 Microsoft Entity Framework65.0 32.7thin 305 Presto Foundation65.0 32.4thin 306 Bigchaindb65.0 32.3thin 307 SilverStripe65.0 32.2thin 308 Apache BookKeeper65.0 32.0thin 309 Pact65.0 31.8thin 310 Kubeflow65.0 31.6thin 311 Mockoon65.0 31.2thin 312 Opentrons65.0 31.2thin 313 Xanadu65.0 30.8thin 314 Tazama65.0 30.8thin 315 systemd65.0 30.2thin 316 K665.0 29.4thin 317 Apache Arrow65.0 29.3thin 318 Elk65.0 29.1thin 319 Apache Beam65.0 28.8thin 320 Agent Skills65.0 28.2thin 321 Apache Mahout65.0 27.7thin 322 Jupyter65.0 27.5thin 323 Apache Lucene65.0 27.5thin 324 OpenAPI TypeScript Codegen65.0 27.5thin 325 Grafast65.0 27.3thin 326 Loki65.0 27.0thin 327 Cucumber65.0 26.8thin 328 Bytewax65.0 26.2thin 329 Legal & General65.0 26.1emerging 330 Redux65.0 25.7emerging 331 System Initiative65.0 25.7emerging 332 Smithy65.0 25.1emerging 333 pub.dev65.0 24.8emerging 334 Apache SystemDS65.0 24.2emerging 335 Container Network Interface (CNI)65.0 24.0emerging 336 Phidata / Agno65.0 23.8emerging 337 Earthly65.0 23.7emerging 338 Zcash65.0 23.2emerging 339 SuperTest65.0 22.9emerging 340 Relay Compiler65.0 22.8emerging 341 Sails Co65.0 22.5emerging 342 Hibernate ORM65.0 21.8emerging 343 SOPS65.0 21.8emerging 344 Ansys65.0 21.7emerging 345 Flask65.0 21.7emerging 346 Kitex65.0 21.7emerging 347 AgentOps65.0 20.8emerging 348 Bean Validation65.0 20.8emerging 349 Docusaurus65.0 20.8emerging 350 DVC65.0 20.2emerging 351 Kamal65.0 19.3emerging 352 AdaCore65.0 19.1emerging 353 Habitat Lab65.0 18.6emerging 354 Dex65.0 18.3emerging 355 HTTPX65.0 18.1emerging 356 TLA Plus Foundation65.0 17.8emerging 357 Cartesi65.0 17.5emerging 358 Superduper65.0 17.3emerging 359 Prism65.0 13.6emerging 360 Medplum60.0 77.4exemplar 361 Google Slides60.0 57.5strong 362 Backpack60.0 44.7developing 363 wasmCloud60.0 41.1developing 364 BTCPay Server60.0 36.2thin 365 Cloud Custodian60.0 35.3thin 366 Hyperliquid60.0 31.3thin 367 Context760.0 30.9thin 368 Cosmos60.0 30.9thin 369 Tinyproxy60.0 26.6thin 370 Band Protocol60.0 24.5emerging 371 Casdoor60.0 22.5emerging 372 Openspec60.0 20.7emerging 373 Helium Network60.0 19.1emerging 374 Ellipsis Labs60.0 18.8emerging 375 Distroless60.0 17.5emerging 376 Newman60.0 13.8emerging 377 Microsoft Power Platform APIs50.0 72.1exemplar 378 PingCAP50.0 68.5exemplar 379 Notion50.0 67.2exemplar 380 Gravitee50.0 66.3strong 381 Tyk50.0 59.6strong 382 Fusio50.0 59.4strong 383 OpenSERP50.0 56.4strong 384 SmartBear50.0 55.0strong 385 PydanticAI50.0 54.0developing 386 b.well50.0 52.3developing 387 Workday Report Writer50.0 51.4developing 388 Red Hat 3scale50.0 50.9developing 389 Opik50.0 48.8developing 390 Spacelift50.0 48.3developing 391 Laminar50.0 47.7developing 392 WordPress50.0 46.0developing 393 SumUp50.0 45.0developing 394 StakPak50.0 43.6developing 395 HAProxy50.0 42.7developing 396 GumGum50.0 42.2developing 397 Apache Nutch50.0 41.5developing 398 LanceDB50.0 41.5developing 399 AI21 Labs50.0 41.1developing 400 Utrecht University50.0 39.7developing 401 Apache Knox50.0 38.8thin 402 Motley50.0 38.4thin 403 Finite State50.0 37.9thin 404 Klavis AI50.0 37.9thin 405 Nexus Mutual50.0 37.9thin 406 Eventbrite50.0 37.3thin 407 Doceree50.0 36.6thin 408 CloudEvents50.0 36.2thin 409 Linkerd50.0 35.9thin 410 BRICK Schema50.0 35.1thin 411 Evidently AI50.0 34.9thin 412 Uptrace50.0 34.6thin 413 Refitter50.0 34.1thin 414 Spring Boot50.0 34.1thin 415 United States Army Corps of Engineers50.0 33.7thin 416 Apache CXF50.0 33.6thin 417 RapiDoc50.0 33.3thin 418 Apache HttpComponents50.0 33.2thin 419 Axon Framework50.0 33.1thin 420 Vault1250.0 33.1thin 421 Apache Hive50.0 32.8thin 422 Safe (Gnosis Safe)50.0 32.8thin 423 Apache Zeppelin50.0 32.2thin 424 pfSense50.0 32.1thin 425 Upwork50.0 32.0thin 426 Automotive Grade Linux50.0 31.8thin 427 Oapi-Codegen50.0 31.5thin 428 Planet Labs50.0 31.5thin 429 SimpliVity50.0 31.2thin 430 Apache HTTP Server50.0 31.1thin 431 US Army Corps of Engineers50.0 31.0thin 432 Triplit50.0 30.5thin 433 TradingView50.0 30.1thin 434 Audigent50.0 29.8thin 435 Emissary-Ingress50.0 29.8thin 436 Firecamp50.0 29.8thin 437 MOSTLY AI50.0 29.6thin 438 Events50.0 29.3thin 439 Apache Calcite50.0 27.8thin 440 DBOS50.0 27.7thin 441 Software Engineering Daily50.0 26.8thin 442 Crawlee50.0 26.8thin 443 Pachyderm50.0 26.6thin 444 o1 Labs50.0 26.4thin 445 Comet50.0 26.3thin 446 Apache Wicket50.0 26.3thin 447 Akita Software50.0 26.2thin 448 Aider50.0 26.0emerging 449 Apache Tapestry50.0 25.9emerging 450 Caddy50.0 25.8emerging 451 Hoverfly50.0 25.6emerging 452 Emdash50.0 25.6emerging 453 Sozu50.0 25.4emerging 454 Grounded.tools50.0 24.9emerging 455 NSwag50.0 24.5emerging 456 AG250.0 24.0emerging 457 2020 Police Brutality50.0 24.0emerging 458 Zefchain50.0 23.0emerging 459 QuEra Computing50.0 22.4emerging 460 Flyte50.0 22.2emerging 461 Confident AI50.0 21.9emerging 462 Vegeta50.0 21.5emerging 463 Twirp50.0 21.0emerging 464 Prompt Driven50.0 20.7emerging 465 LUMICKS50.0 20.4emerging 466 Extropic50.0 20.3emerging 467 Element50.0 20.1emerging 468 UCL50.0 19.7emerging 469 Kratix50.0 19.7emerging 470 Deloitte50.0 19.6emerging 471 Coasts50.0 18.9emerging 472 Nameko50.0 16.8emerging 473 Excalidraw50.0 15.9emerging 474 MOSN50.0 15.7emerging 475 Colibri50.0 15.5emerging 476 Hurl50.0 14.4emerging 477 PartyDAO50.0 12.5emerging 478 Utopia50.0 10.8minimal 479 Viva Translate50.0 9.2minimal 480 AWS Lambda40.0 70.8exemplar 481 Adobe Campaign40.0 70.7exemplar 482 Palo Alto Networks40.0 68.2exemplar 483 Adobe Analytics40.0 67.6exemplar 484 Splunk40.0 64.9strong 485 Bump.sh40.0 61.7strong 486 WhatsApp40.0 55.4strong 487 Looker40.0 49.9developing 488 Trakt40.0 49.0developing 489 Perforce40.0 46.8developing 490 Bloomberg AIM40.0 45.0developing 491 Hey API40.0 41.5developing 492 Stellar40.0 41.4developing 493 Apache CouchDB40.0 40.9developing 494 Apache Ignite40.0 38.4thin 495 Apache Kylin40.0 36.8thin 496 CodeSandbox40.0 36.7thin 497 Cloudflare R240.0 36.3thin 498 Cloudflare KV40.0 36.0thin 499 Apache Geode40.0 33.6thin 500 Apache Curator40.0 33.5thin

Move this number. Every provider in the catalog is profiled into a public record at artifacts.apis.io/<provider>/, and each check above names the exact artifact it reads. Publish the artifact, open an issue on github.com/api-evangelist/<provider> pointing at it, and the next scoring run picks it up — no gatekeeping and no fee. The full rubric is at apis.io/rating/, and the Influence plan is the fast lane if you would rather work your own listing through the API — remediation, projections and re-check requests.

Scored on rubric v0.26.0 across 36,710 providers · lists rebuilt 2026-11-01 · capped at the top 500 per page.

Open Source Surface

How it is scored

How the catalog distributes on it

Top providers

The other 8 facets