Not a software directory. A live mission-control station monitoring open-source software with verifiable 0–100 Safety Scores, OpenSSF Scorecards, and incident alerts.
Uptime trackers, system telemetry, and public incident status pages.
Cryptographic credential vaults, multi-factor tokens, and SSO identity brokers.
Self-hosted video libraries, personal music streaming, and audiobook servers.
Encrypted file synchronizers, document workspaces, and backup nodes.
Collaborative knowledge bases, technical wikis, and local-first notebooks.
Local-first smart home hubs, protocol bridges, and micro-controller automation.
Cookieless web analytics, product traffic telemetry, and compliance dashboards.
Self-hosted git repositories, API clients, and remote development workspaces.
Instant full-text typo-tolerant search engines and embedded document stores.
Zero-trust mesh networks, private DNS ad-blockers, and WireGuard tunnels.
Visual event flow builders, webhook routers, and asynchronous task runners.
Facial recognition galleries, mobile backup daemons, and EXIF metadata viewers.
Zero-based envelope budgeting, double-entry ledgers, and transaction synchronizers.
Autonomous terminal, coding, and workflow agents with credential and shell access.
| Repository | Sector | Safety Score | Verdict | Last Scanned | Action |
|---|---|---|---|---|---|
| Home Assistanthome-assistant/core | home-automation | 97 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Immichimmich-app/immich | photo-management | 95 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Meilisearchmeilisearch/meilisearch | databases-search | 95 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Vaultwardendani-garcia/vaultwarden | password-auth | 95 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Actual Budgetactualbudget/actual | finance-budgeting | 94 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| ESPHomeesphome/esphome | home-automation | 94 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Pi-holepi-hole/pi-hole | network-vpn | 94 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| BookStackBookStackApp/BookStack | notes-wiki | 93 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Headscalejuanfont/headscale | network-vpn | 93 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Hoppscotchhoppscotch/hoppscotch | developer-tools | 93 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Uptime Kumalouislam/uptime-kuma | monitoring-status | 93 / 100 | healthy | 2026-09-26 | Inspect Dossier → |
| Nextcloud Hubnextcloud/server | cloud-storage | 92 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Typesensetypesense/typesense | databases-search | 92 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Umamiumami-software/umami | analytics-metrics | 92 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Zigbee2MQTTKoenkk/zigbee2mqtt | home-automation | 92 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Jellyfinjellyfin/jellyfin | media-streaming | 91.8 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Firefly IIIfirefly-iii/firefly-iii | finance-budgeting | 91 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Navidromenavidrome/navidrome | media-streaming | 91 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Plausible Analyticsplausible/analytics | analytics-metrics | 91 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Authentikgoauthentik/authentik | password-auth | 90 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Giteago-gitea/gitea | developer-tools | 90 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Audiobookshelfadvplyr/audiobookshelf | media-streaming | 89 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Codercoder/coder | developer-tools | 89 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| n8nn8n-io/n8n | automation-workflow | 89 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Activepiecesactivepieces/activepieces | automation-workflow | 88 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Passboltpassbolt/passbolt_api | password-auth | 88 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Glancesnicolargo/glances | monitoring-status | 86 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Self-hosted LiveSyncvrtmrz/obsidian-livesync | notes-wiki | 86 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| SurrealDBsurrealdb/surrealdb | databases-search | 86 / 100 | healthy | 2026-09-18 | Inspect Dossier → |
| Matomomatomo-org/matomo | analytics-metrics | 76 / 100 | caution | 2026-09-18 | Inspect Dossier → |
| Seafilehaiwen/seafile | cloud-storage | 74 / 100 | caution | 2026-09-18 | Inspect Dossier → |
| PhotoPrismphotoprism/photoprism | photo-management | 72 / 100 | caution | 2026-09-18 | Inspect Dossier → |
| Maybemaybe-finance/maybe | finance-budgeting | 68 / 100 | caution | 2026-09-18 | Inspect Dossier → |
| WireGuard UIngoduykhanh/wireguard-ui | network-vpn | 68 / 100 | caution | 2026-09-18 | Inspect Dossier → |
| Wiki.jsrequarks/wiki | notes-wiki | 67 / 100 | caution | 2026-09-18 | Inspect Dossier → |
| ownCloud Classicowncloud/core | cloud-storage | 63 / 100 | caution | 2026-09-18 | Inspect Dossier → |
| LibrePhotosLibrePhotos/librephotos | photo-management | 60 / 100 | caution | 2026-09-18 | Inspect Dossier → |
| Statping-ngstatping-ng/statping-ng | monitoring-status | 56 / 100 | caution | 2026-09-18 | Inspect Dossier → |
| Huginnhuginn/huginn | automation-workflow | 42 / 100 | risky | 2026-09-18 | Inspect Dossier → |
Don't see your tool monitored above? Paste any public GitHub repository for a real-time safety audit.
Strict mathematical ranking. Each tool earned its position from verified OpenSSF heuristics and commit vitality.
Open-source home automation that puts local control and privacy first.
High performance self-hosted photo and video management solution.
Blazing fast, typo-tolerant search engine designed for delightful search experiences.
Lightweight Bitwarden-compatible password vault server written in Rust.
Privacy-focused zero-based budgeting system with local-first encryption.
Velocity and volatility over raw popularity. Continuous 7-day drift tracking identifying rapid security hardening and supply-chain regressions.
High performance self-hosted photo and video management solution.
Coordinated disclosure closed; automated CodeQL scanning enabled in CI
The authentication glue you need for all your services.
Security audit published by Cure53; all medium findings resolved
High-reliability synthetic uptime and service health monitoring server with multi-channel alerting.
Dependency pinning verified & OpenSSF Scorecard increased to 9.2
Lightweight Bitwarden compatible server written in Rust.
Rust crates audited against RUSTSEC advisory database
Security bulletins highlighting supply-chain dormancy, commercial governance pivots, and unpatched CVE exposure. We watch these repos so you don't get burned.
Repository commit cadence ceased over 6 months ago. 14 critical-severity Ruby gem CVE advisories remain unresolved in main branch CI pipelines.
Community rescue fork exhibits single-maintainer dependency risk. Pull request triage has stalled with unreviewed database schema migrations.
Essential multi-user permission controls and high-resolution map tiles gated behind commercial sponsor subscription tiers.
PHP 10.x core is in maintenance-only status. Historical CVE-2023-49103 requires immediate configuration verification on active host nodes.
13 sectors mapped radially. Sector distance and color indicate average Safety Score (🟢 ≥80, 🟡 50–79, 🔴 <50). Node radius represents evaluated project density.
Pre-audited multi-tool blueprints. Each bundle is mathematically evaluated for combined reliability, shared dependencies, and resource limits.
Replace Google Photos, Drive, and Chrome sync with uncompromised sovereignty.
Local machine learning, vector search, and autonomous workflow engines.
Lightweight documentation, version control, and single sign-on for small teams.
The essential starter pack for your first mini PC or Raspberry Pi.
Compliant analytics, instant search, and synthetic uptime tracking.
Zero-based budgeting and private financial archives behind zero-trust networking.
Answer 3 operational questions to calculate your optimal pre-screened toolchain. Functions with zero JavaScript.
Open-source home automation that puts local control and privacy first.
High performance self-hosted photo and video management solution.
Blazing fast, typo-tolerant search engine designed for delightful search experiences.
Scores are derived mathematically from four weighted dimensions: Security Health (35%), Maintenance Cadence (30%), Community Velocity (20%), and Release Hygiene (15%). No vendor can pay for higher scores.