Open Source Surface

10% of the composite, when it applies 4 checks · 40 pointsconditional facet open_source

For providers whose product is itself open source ONLY: does the repository publish the maintainership surface a consumer needs in order to depend on it? A vulnerability-disclosure path, a documented contribution route, a published release history, and a stated code of conduct. Not applied to closed-source products — a company with no CONTRIBUTING.md is not deficient, it is differently shaped. Not applied where the repository could not be read, either: unreadable is not missing.

678providers scored on it

630score above zero

57.5mean sub-score

55.0median sub-score

161at 100

This facet is conditional. It is computed for every provider so its panel can render, but it enters the composite only where it applies — 678 of the 26,891 scored providers in the catalog. The counts on this page are over that population, not the whole catalog, and everyone else is neither measured against it nor penalised for it. The applicability rule and the composite arithmetic are on the rubric page.

How it is scored

4 checks worth 40 points, grouped by the artifact each one reads. A facet's sub-score is its awarded points normalized against the points that were actually applicable to that provider — a check needing an artifact the provider does not publish at all is N/A, and leaves both sides of the fraction.

Open Source Surface · open_source

Check	Rule	Points
Published vulnerability-disclosure pathWhere an integrator reports a vulnerability in the thing they just put into production. The rarest of the four at 35.0% and the one that most directly affects a consumer, which is why it carries the most points.	`a SECURITY policy is present on the provider's own product repository`	14
Documented contribution routeWhether the project is actually open to participation or merely published. 62.4% coverage.	`a CONTRIBUTING guide is present on the provider's own product repository`	10
Published release historyVersioned, dated artifacts — the thing a consumer checks before depending on a project. Commonest of the four at 76.0%, but priced above the code of conduct because it carries far more information about whether the project is maintained.	`the provider's own product repository publishes releases`	10
Stated code of conductA stated standard for participation. Priced lowest of the four despite being rarer than releases at 49.6%: it is the most template-prone signal in the set, frequently dropped in wholesale, and so says the least about the project that holds it.	`a CODE_OF_CONDUCT is present on the provider's own product repository`	6

How the catalog distributes on it

Every one of the 678 providers this facet is scored on, bucketed by sub-score.

90-100161 · 23.7%

75-89.965 · 9.6%

50-74.9210 · 31.0%

25-49.9184 · 27.1%

0.1-24.910 · 1.5%

048 · 7.1%

Top providers

The top 500 of 630 providers scoring above zero on this facet, ranked by facet sub-score, ties broken by composite.

1 Appwrite100.0 80.5exemplar 2 Svix100.0 80.4exemplar 3 Ghost100.0 75.7exemplar 4 Azure Kubernetes Service100.0 72.2exemplar 5 Gitea100.0 71.7exemplar 6 Microsoft Azure Functions100.0 68.6exemplar 7 Amazon FreeRTOS100.0 66.2strong 8 Appsmith100.0 66.1strong 9 Microsoft Azure Health Data Services100.0 64.1strong 10 GitHub Copilot100.0 64.1strong 11 Azure Databricks100.0 63.4strong 12 OpenZeppelin100.0 61.6strong 13 Azure Service Bus100.0 61.5strong 14 Hugging Face100.0 61.0strong 15 Netcracker100.0 61.0strong 16 WSO2100.0 60.6strong 17 Microsoft SQL Server100.0 59.6strong 18 Azure Blob Storage100.0 59.1strong 19 Microsoft Word100.0 58.5strong 20 Graphiant100.0 58.1strong 21 Azure Log Analytics100.0 58.0strong 22 Kong100.0 58.0strong 23 ZenML100.0 57.8strong 24 DataHub100.0 57.4strong 25 Hugging Face Transformers100.0 57.2strong 26 Mem0100.0 56.4strong 27 Cloudflare Queues100.0 56.2strong 28 Academy Software Foundation100.0 55.0strong 29 Nord Security100.0 54.7strong 30 Artillery100.0 54.7strong 31 Misskey100.0 53.4developing 32 Authelia100.0 52.8developing 33 Buoyant100.0 52.5developing 34 Cognee100.0 51.9developing 35 Etcd100.0 51.2developing 36 Artifact Hub100.0 50.7developing 37 Kestra100.0 50.7developing 38 Prometheus100.0 50.4developing 39 Pixie100.0 50.1developing 40 Knative100.0 49.9developing 41 NuGet100.0 49.7developing 42 Prefect100.0 49.4developing 43 Apache APISIX100.0 49.0developing 44 Contour100.0 48.9developing 45 KEDA100.0 48.1developing 46 Apollo Config100.0 47.2developing 47 NGINX100.0 46.9developing 48 Bagisto100.0 46.1developing 49 Longhorn100.0 46.0developing 50 Polymarket100.0 46.0developing 51 Cilium100.0 45.8developing 52 gRPC100.0 45.7developing 53 Optimism100.0 45.6developing 54 Argo Workflows100.0 45.5developing 55 Quickwit100.0 45.5developing 56 Ory100.0 45.4developing 57 Timoni100.0 45.4developing 58 Spring WebFlux100.0 45.3developing 59 CubeFS100.0 45.3developing 60 Trieve100.0 45.3developing 61 Volcano100.0 45.2developing 62 API Dash100.0 45.2developing 63 Conductor100.0 44.9developing 64 Pixelfed100.0 44.9developing 65 KubeVirt100.0 44.5developing 66 Porter100.0 44.5developing 67 TypeScript100.0 44.4developing 68 Rook100.0 44.2developing 69 Envoy100.0 44.0developing 70 Apache Struts100.0 44.0developing 71 SPIRE100.0 43.7developing 72 Incus100.0 43.6developing 73 zkSync100.0 43.4developing 74 Apache Dubbo100.0 43.4developing 75 OpenWallet Foundation100.0 43.4developing 76 Portainer100.0 43.4developing 77 Kuma100.0 43.2developing 78 Zep100.0 43.2developing 79 Helm100.0 42.8developing 80 Ketch100.0 42.7developing 81 Weights & Biases100.0 42.6developing 82 Apache Superset100.0 42.1developing 83 Fluentd100.0 42.1developing 84 Apache JMeter100.0 42.0developing 85 Aqua Security100.0 41.6developing 86 Apache Doris100.0 41.4developing 87 Node-RED100.0 41.4developing 88 Radius100.0 40.9developing 89 Verdaccio100.0 40.8developing 90 Kubeflow Pipelines100.0 40.3developing 91 Kong AI Gateway100.0 40.2developing 92 Vitess100.0 39.5developing 93 OptScale100.0 39.4developing 94 Envoy Proxy100.0 39.1thin 95 KrakenD100.0 39.0thin 96 smolagents100.0 39.0thin 97 StackRox100.0 38.9thin 98 Chia Network100.0 38.8thin 99 Topaz100.0 38.8thin 100 Podman100.0 38.5thin 101 Carvel100.0 38.3thin 102 Apache CloudStack100.0 38.1thin 103 Flatcar Container Linux100.0 38.0thin 104 Kyverno100.0 37.8thin 105 Firecracker100.0 37.5thin 106 OWASP ZAP100.0 37.5thin 107 Azure Durable Functions100.0 37.1thin 108 Jaeger100.0 36.7thin 109 Frappe100.0 36.0thin 110 Cert-Manager100.0 35.7thin 111 io.net100.0 35.6thin 112 Spacemesh100.0 35.5thin 113 Notary Project100.0 35.4thin 114 Apache Thrift100.0 34.4thin 115 Apache DolphinScheduler100.0 34.4thin 116 Fluent Bit100.0 33.6thin 117 McKinsey & Company100.0 33.6thin 118 OneUptime100.0 33.3thin 119 TODO Group100.0 33.0thin 120 Schemathesis100.0 33.0thin 121 Moleculer100.0 32.6thin 122 Apache Maven100.0 32.5thin 123 TypeSpec100.0 32.2thin 124 WasmEdge100.0 32.2thin 125 Semgrep100.0 31.8thin 126 Fastify100.0 31.5thin 127 YARN100.0 31.3thin 128 Spin100.0 31.1thin 129 Kratos100.0 31.1thin 130 BFE100.0 30.6thin 131 Storybook100.0 29.3thin 132 Score100.0 29.2thin 133 Reaction Commerce100.0 29.2thin 134 Meshery100.0 28.9thin 135 Better Auth100.0 28.6thin 136 Genie100.0 28.0thin 137 OpenTofu100.0 27.6thin 138 Buildah100.0 27.6thin 139 OpenEBS100.0 27.4thin 140 NestJS100.0 27.3thin 141 Coral100.0 27.3thin 142 PokéAPI GraphQL100.0 27.2thin 143 Bridgecrew100.0 27.1thin 144 Containerfile100.0 26.8thin 145 Apache JMeter100.0 26.3thin 146 Azure CLI100.0 26.1emerging 147 Axios100.0 26.0emerging 148 Kata Containers100.0 25.9emerging 149 Quirrel100.0 25.8emerging 150 Node-Fetch100.0 25.5emerging 151 LF AI and Data100.0 25.4emerging 152 gVisor100.0 24.9emerging 153 kagent100.0 24.6emerging 154 Newton100.0 24.5emerging 155 Open Service Mesh100.0 24.5emerging 156 Werf100.0 24.5emerging 157 Gatsby100.0 21.7emerging 158 Granulate100.0 20.9emerging 159 Karate100.0 20.8emerging 160 DNN Software100.0 20.0emerging 161 Ratify100.0 17.6emerging 162 Calico85.0 71.0exemplar 163 Solana85.0 67.1exemplar 164 Barndoor85.0 65.1strong 165 LlamaParse85.0 60.3strong 166 Hatchet85.0 55.7strong 167 GoHarbor85.0 54.7strong 168 IOTA85.0 54.5strong 169 Reducto85.0 54.5strong 170 Tigera85.0 51.9developing 171 Runway85.0 51.6developing 172 Amika85.0 51.3developing 173 turbopuffer85.0 49.9developing 174 Argo85.0 48.9developing 175 Val Town85.0 47.4developing 176 Nominatim85.0 47.0developing 177 tRPC85.0 46.9developing 178 Daily85.0 46.7developing 179 Politecnico di Torino85.0 45.7developing 180 OpenObserve85.0 44.0developing 181 Weights and Biases85.0 43.4developing 182 Labelbox85.0 41.4developing 183 Zipkin85.0 41.0developing 184 Triton Inference Server85.0 39.9developing 185 Apache Zipkin85.0 39.1thin 186 Ambient Mesh85.0 35.0thin 187 XRP Ledger85.0 32.1thin 188 Port85.0 31.3thin 189 World (Worldcoin)85.0 30.3thin 190 Swagger85.0 30.1thin 191 PHP-FPM85.0 30.0thin 192 Garden85.0 28.9thin 193 NanoVMs85.0 26.5thin 194 OpenGamma85.0 21.8emerging 195 MyCrypto85.0 15.5emerging 196 Power Query75.0 80.0exemplar 197 Canvas75.0 73.7exemplar 198 Azure DevOps75.0 67.4exemplar 199 Azure Container Apps75.0 61.6strong 200 Oracle GoldenGate75.0 57.8strong 201 AgentGateway75.0 54.0developing 202 Bifrost75.0 50.2developing 203 Anomaly Detection75.0 47.7developing 204 Apache Kafka75.0 45.9developing 205 Apache Iceberg75.0 45.3developing 206 Apache OFBiz75.0 45.1developing 207 Apiman75.0 45.1developing 208 Apache Tomcat75.0 43.3developing 209 Apache Solr75.0 41.9developing 210 Apache HBase75.0 41.8developing 211 Apache Tomcat75.0 40.6developing 212 Apache Jena75.0 40.4developing 213 Apache NiFi75.0 40.3developing 214 Apache Helix75.0 39.8developing 215 Apache Spark75.0 38.9thin 216 Einride75.0 38.3thin 217 Youki75.0 38.2thin 218 Apache Storm75.0 37.9thin 219 Apache ActiveMQ75.0 35.5thin 220 Apache Tika75.0 34.5thin 221 Akri75.0 32.8thin 222 Apache Camel75.0 31.7thin 223 Apache TinkerPop75.0 31.6thin 224 Apache MXNet75.0 28.7thin 225 Streaming75.0 24.4emerging 226 Higress75.0 22.0emerging 227 Stoplight65.0 69.7exemplar 228 New Relic65.0 68.1exemplar 229 Netlify65.0 67.3exemplar 230 Amazon SageMaker65.0 63.2strong 231 Auth065.0 60.8strong 232 Dagster65.0 60.6strong 233 Amazon Q65.0 57.6strong 234 Composio65.0 56.4strong 235 Amazon ECS65.0 53.5developing 236 Lunar65.0 52.3developing 237 Mercado Pago65.0 51.0developing 238 Authzed65.0 49.7developing 239 Delta Lake65.0 48.7developing 240 Cloud Native Buildpacks65.0 47.4developing 241 Golioth65.0 47.0developing 242 Rancher65.0 46.6developing 243 IBM Language Translator65.0 46.2developing 244 Apache Airflow65.0 45.4developing 245 GOV.UK Pay65.0 45.4developing 246 Activiti65.0 44.8developing 247 Kubernetes Services65.0 43.9developing 248 farmOS65.0 43.5developing 249 Orbit65.0 43.4developing 250 Label Studio65.0 43.2developing 251 Ansible Roles65.0 42.8developing 252 Milvus65.0 42.8developing 253 OpenTelemetry65.0 42.7developing 254 TYPO365.0 42.7developing 255 Jupyter Notebook65.0 42.3developing 256 Openverse65.0 42.2developing 257 Nuclei65.0 42.0developing 258 Jupyter Server65.0 41.2developing 259 SilverStripe65.0 40.4developing 260 Apache Druid65.0 40.1developing 261 JupyterLab65.0 40.0developing 262 Tempo65.0 39.8developing 263 Falco65.0 38.9thin 264 AI Gateway65.0 38.1thin 265 Microsoft Windows65.0 37.9thin 266 Ocelot65.0 37.6thin 267 Opentrons65.0 37.5thin 268 Spinnaker65.0 37.2thin 269 Logto65.0 36.9thin 270 Appium65.0 36.7thin 271 Sigstore65.0 36.5thin 272 Spring Boot 365.0 36.4thin 273 Microsoft Entity Framework65.0 36.1thin 274 Zephyr Project65.0 36.0thin 275 LangGraph65.0 35.9thin 276 Trivy65.0 35.3thin 277 Pact65.0 35.0thin 278 Kubeflow65.0 34.9thin 279 Mockoon65.0 34.5thin 280 Spring Integration65.0 34.4thin 281 Tazama65.0 34.3thin 282 Presto Foundation65.0 34.1thin 283 Bytewax65.0 33.4thin 284 Test First65.0 32.9thin 285 K665.0 32.6thin 286 Bigchaindb65.0 32.2thin 287 Riverlane65.0 31.9thin 288 Apache BookKeeper65.0 31.8thin 289 Phidata / Agno65.0 31.6thin 290 Xanadu65.0 31.2thin 291 Zcash65.0 31.1thin 292 Jupyter65.0 30.2thin 293 Agent Skills65.0 30.2thin 294 Grafast65.0 30.2thin 295 Loki65.0 30.1thin 296 Apache Arrow65.0 29.6thin 297 Cucumber65.0 29.4thin 298 Ansys65.0 29.4thin 299 Apache Beam65.0 29.1thin 300 pub.dev65.0 28.7thin 301 Apache Mahout65.0 28.2thin 302 Elk65.0 28.1thin 303 System Initiative65.0 28.0thin 304 Apache Lucene65.0 27.8thin 305 Smithy65.0 27.4thin 306 Legal & General65.0 27.1thin 307 Container Network Interface (CNI)65.0 26.6thin 308 Superduper65.0 25.9emerging 309 WhyLabs65.0 25.2emerging 310 Relay Compiler65.0 25.2emerging 311 Kitex65.0 24.9emerging 312 Apache SystemDS65.0 24.7emerging 313 Bean Validation65.0 23.8emerging 314 Docusaurus65.0 23.8emerging 315 Sails Co65.0 23.2emerging 316 Earthly65.0 23.1emerging 317 BDD (Behavior-Driven Development)65.0 22.5emerging 318 Habitat Lab65.0 21.6emerging 319 TLA Plus Foundation65.0 20.8emerging 320 AdaCore65.0 20.7emerging 321 HTTPX65.0 19.1emerging 322 Cartesi65.0 19.0emerging 323 Gherkin65.0 16.9emerging 324 Prism65.0 16.5emerging 325 Backpack60.0 54.9strong 326 Google Slides60.0 54.5strong 327 wasmCloud60.0 44.3developing 328 Cosmos60.0 38.6thin 329 Hyperliquid60.0 37.9thin 330 Cloud Custodian60.0 36.7thin 331 Band Protocol60.0 34.6thin 332 Context760.0 33.5thin 333 Tinyproxy60.0 29.2thin 334 Helium Network60.0 26.4thin 335 Openspec60.0 21.8emerging 336 Distroless60.0 20.5emerging 337 Ellipsis Labs60.0 17.7emerging 338 Newman60.0 16.7emerging 339 PsyOptions60.0 14.6emerging 340 Microsoft Power Platform APIs50.0 76.4exemplar 341 Notion50.0 58.7strong 342 PingCAP50.0 58.3strong 343 Microsoft Azure Active Directory50.0 57.3strong 344 b.well50.0 56.0strong 345 PydanticAI50.0 54.3strong 346 Fusio50.0 54.2developing 347 Workday Report Writer50.0 52.4developing 348 Opik50.0 50.5developing 349 Red Hat 3scale50.0 49.6developing 350 OpenSERP50.0 49.3developing 351 SumUp50.0 49.1developing 352 Utrecht University50.0 47.4developing 353 Klavis AI50.0 47.2developing 354 WordPress50.0 45.3developing 355 Laminar50.0 45.3developing 356 StakPak50.0 44.5developing 357 SmartBear50.0 44.4developing 358 Spacelift50.0 44.2developing 359 HAProxy50.0 43.9developing 360 Automotive Grade Linux50.0 43.4developing 361 AI21 Labs50.0 43.1developing 362 Apache Nutch50.0 42.7developing 363 Safe (Gnosis Safe)50.0 42.6developing 364 Evidently AI50.0 42.4developing 365 Nexus Mutual50.0 42.3developing 366 United States Army Corps of Engineers50.0 41.9developing 367 GumGum50.0 40.6developing 368 Spring Boot50.0 40.0developing 369 Apache Knox50.0 39.8developing 370 CloudEvents50.0 39.6developing 371 Planet Labs50.0 39.6developing 372 Fern50.0 38.7thin 373 Linkerd50.0 38.6thin 374 Doceree50.0 38.4thin 375 Triplit50.0 37.8thin 376 MOSTLY AI50.0 37.5thin 377 BRICK Schema50.0 37.3thin 378 Uptrace50.0 36.9thin 379 Finite State50.0 36.7thin 380 Axon Framework50.0 36.4thin 381 Apache HttpComponents50.0 35.9thin 382 Eventbrite50.0 35.6thin 383 Motley50.0 35.6thin 384 Apache Hive50.0 35.4thin 385 Apache CXF50.0 35.3thin 386 Vault1250.0 34.9thin 387 RapiDoc50.0 34.1thin 388 Apache Zeppelin50.0 34.0thin 389 Apache HTTP Server50.0 33.7thin 390 Firecamp50.0 32.8thin 391 Emissary-Ingress50.0 32.4thin 392 AG250.0 31.8thin 393 pfSense50.0 31.8thin 394 Upwork50.0 31.6thin 395 US Army Corps of Engineers50.0 31.2thin 396 SimpliVity50.0 30.7thin 397 DBOS50.0 30.4thin 398 TradingView50.0 30.2thin 399 Caddy50.0 29.7thin 400 Confident AI50.0 29.3thin 401 Audigent50.0 29.1thin 402 Hoverfly50.0 29.0thin 403 Apache Calcite50.0 28.8thin 404 Software Engineering Daily50.0 28.8thin 405 Grounded.tools50.0 28.3thin 406 Comet50.0 28.2thin 407 Pachyderm50.0 28.2thin 408 Apache Wicket50.0 27.8thin 409 Sozu50.0 27.7thin 410 Akita Software50.0 27.4thin 411 Apache Tapestry50.0 27.4thin 412 Events50.0 27.3thin 413 o1 Labs50.0 26.8thin 414 Flyte50.0 26.7thin 415 UCL50.0 26.6thin 416 Emdash50.0 26.0emerging 417 Deloitte50.0 25.4emerging 418 Vegeta50.0 25.2emerging 419 QuEra Computing50.0 23.9emerging 420 Templates50.0 23.9emerging 421 Zefchain50.0 23.9emerging 422 Service Mesh Interface (SMI)50.0 22.6emerging 423 2020 Police Brutality50.0 22.5emerging 424 Kratix50.0 22.5emerging 425 Element50.0 21.7emerging 426 Prompt Driven50.0 21.3emerging 427 Nameko50.0 20.8emerging 428 Extropic50.0 20.8emerging 429 Coasts50.0 20.5emerging 430 LUMICKS50.0 19.4emerging 431 MOSN50.0 18.7emerging 432 Hurl50.0 17.4emerging 433 Colibri50.0 17.0emerging 434 PartyDAO50.0 14.0emerging 435 Utopia50.0 12.3emerging 436 Viva Translate50.0 11.7emerging 437 Adobe Campaign40.0 74.9exemplar 438 Palo Alto Networks40.0 71.1exemplar 439 Adobe Analytics40.0 65.9strong 440 AWS Lambda40.0 60.3strong 441 Trakt40.0 56.4strong 442 WhatsApp40.0 51.4developing 443 Stellar40.0 49.8developing 444 Bloomberg AIM40.0 49.7developing 445 Bump.sh40.0 49.4developing 446 Perforce40.0 47.6developing 447 CodeSandbox40.0 46.5developing 448 Splunk40.0 45.3developing 449 Cloudflare R240.0 43.9developing 450 Hey API40.0 43.7developing 451 Looker40.0 43.7developing 452 SAP Concur40.0 43.0developing 453 Cloudflare KV40.0 42.9developing 454 Eversign40.0 42.5developing 455 Apache Ignite40.0 41.0developing 456 Apache CouchDB40.0 39.8developing 457 Spree Commerce40.0 39.6developing 458 Saleor40.0 39.5developing 459 Apache Kylin40.0 36.6thin 460 Apache Geode40.0 35.6thin 461 Apache Hudi40.0 34.7thin 462 Apache Curator40.0 34.0thin 463 Apache EventMesh40.0 33.7thin 464 SPIFFE40.0 33.5thin 465 Apache Guacamole40.0 32.8thin 466 Bloomberg Professional Service40.0 31.5thin 467 Apache Flume40.0 31.2thin 468 Apache Flink40.0 30.8thin 469 Angle40.0 28.9thin 470 REST Client40.0 28.4thin 471 Apache Mesos40.0 27.8thin 472 Genql40.0 27.3thin 473 Apache TVM40.0 25.6emerging 474 Apache Flink40.0 24.6emerging 475 Vector40.0 24.0emerging 476 5ire40.0 23.4emerging 477 Apache Libcloud40.0 23.2emerging 478 Apache Sling40.0 23.1emerging 479 Seneca40.0 20.3emerging 480 Merbridge40.0 18.3emerging 481 Neptune.ai40.0 18.1emerging 482 Fluid40.0 16.6emerging 483 Kubectl40.0 13.9emerging 484 Silk Labs40.0 13.8emerging 485 Open Mainframe Project40.0 13.6emerging 486 LF Broadband40.0 12.7emerging 487 Makani *40.0 11.9emerging 488 Cyware35.0 47.1developing 489 Squads35.0 41.2developing 490 Limit Break35.0 31.5thin 491 REST Assured35.0 30.3thin 492 Orange Business25.0 70.1exemplar 493 Heroic Labs25.0 67.9exemplar 494 Mailmodo25.0 63.7strong 495 Solo.io25.0 62.3strong 496 Buf25.0 61.0strong 497 Hyperbolic25.0 59.4strong 498 APIFreaks - API Hub for Developers25.0 58.2strong 499 Figma25.0 57.8strong 500 Pocket Network25.0 57.3strong

Move this number. Every provider in the catalog is profiled from a public repository at github.com/api-evangelist/<provider>, and each check above names the exact artifact it reads. Publish the artifact, open a pull request, and the next scoring run picks it up — no gatekeeping and no fee. The full rubric is at apis.io/rating/, and the Influence plan is the fast lane if you would rather work your own listing through the API — remediation, projections and re-check requests.

Scored on rubric v0.22.0 across 26,891 providers · lists rebuilt 2026-09-14 · capped at the top 500 per page.

Open Source Surface

How it is scored

How the catalog distributes on it

Top providers

The other 8 facets