Categories / plausible/analytics / evidence

plausible/analyticsapp

An open source, cookie-free web analytics platform offered as a managed cloud service or a self-hosted community edition.

stars 27,938license AGPL-3.0pushed today

analyticsanalytics-dashboardclickhouseelixirgoogle-analyticsmarketingopen-source-analyticsphoenixplausible-analyticspostgresqlprivacyprivacy-friendlyself-hostedsimple-analyticsstatisticstailwindcssweb-analyticswebsite-analyticswebsite-statswebsite-tracking

6.7COMPOSITE

REPO-RATERBBBDEEP AUDIT · 07/2026

⋯

Dossier compilation

This audit's judge read a single 11.3k-token evidence dossier, compiled mechanically under per-section budgets. Below: each section, what went in, and what was cut. Citations on the audit page resolve here.

#	Section / contents	Mode	Spent / budget
[27]	Vitals + README (distilled)	SECTION	1.5k / 1.5k
[1]	README.md · distilled: badges/TOC stripped	DOSSIER	1.5k
[2]	Structure (dir-aggregated)	SECTION	158 / 1.0k
[28]	Health + Static digest	SECTION	808 / 2.0k
[3]	(github api)	PROBE	404
[4]	(static analysis)	PROBE	404
[29]	Manifests + lockfiles + CI (verbatim)	SECTION	942 / 1.2k
[5]	.github/workflows/tracker.yml	DOSSIER	314
[6]	.github/workflows/publish-docs.yml	DOSSIER	314
[7]	.github/workflows/codespell.yml	DOSSIER	314
[30]	Core files (complete / whole-function)	SECTION	5.0k / 5.0k
[8]	assets/js/dashboard/components/combobox.js	DOSSIER	2.5k
[9]	assets/js/dashboard/stats/graph/intervals.ts	DOSSIER	1.6k
[10]	tracker/src/engagement.js · partial: 4/10 whole functions	DOSSIER	766
[31]	Test reality	SECTION	1.4k / 1.5k
[11]	e2e/tests/dashboard/general.spec.ts	DOSSIER	1.3k
[32]	Probe answers	SECTION	910 / 1.5k
	[12] probe-deps[13] probe-license[14] probe-ci[15] probe-todo[16] probe-assertions[17] probe-top-tested[18] probe-cve[19] probe-claim-1[20] probe-claim-2[21] probe-claim-3[22] probe-claim-4[23] probe-claim-5[24] probe-claim-6
[25]	Outlines (files not read above)	SECTION	226 / 500
[33]	Coverage notes (what was cut & why)	SECTION	18 / 400
[26]	(composer)	DOSSIER	18
	2002 files mapped · 3 complete, 1 whole-function · 13 probes		11.3k / 15k cap

Measured properties

Raw signals behind the scores. Source tags: COMPUTED derived from the clone · API GitHub/registry data · JUDGE model estimate

loc_source116338 COMPUTED

loc_test143507 COMPUTED

test_to_source_ratio1.23 COMPUTED

files_tracked2002 COMPUTED

language_mix[object Object] COMPUTED

deps_direct— COMPUTED

lockfile— COMPUTED

ci_workflows14 COMPUTED

security_mdtrue COMPUTED

total_commits4322 COMPUTED

commits_last_90d173 COMPUTED

top_author_share_pct34 COMPUTED

bus_factor_80pct8 COMPUTED

first_commit2019-09-02 COMPUTED

last_commit2026-07-22 COMPUTED

gh_stars27938 API

gh_forks1728 API

gh_open_issues47 API

gh_pushed_at2026-07-22T16:44:24Z API

gh_created_at2018-12-04T22:33:36Z API

gh_archivedfalse API

gh_licenseAGPL-3.0 API

gh_topicsanalytics,analytics-dashboard,clickhouse,elixir,google-analytics,marketing,open-source-analytics,phoenix,plausible-analytics,postgresql,privacy,privacy-friendly,self-hosted,simple-analytics,statistics,tailwindcss,web-analytics,website-analytics,website-stats,website-tracking API

gh_default_branchmaster API

issue_open24 API

issue_stale_ratio_pct63 API

issue_median_first_response_days— API

issue_median_close_days0.5 API

issue_bot_first_response_pct— API

pr_open23 API

pr_median_merge_days1.7 API

pr_external_merge_share_pct74 API

pr_reviewed_share_pct95 API

releases_total44 API

releases_last_24mo19 API

release_latest2026-05-15T09:15:56Z API

release_notes_share_pct100 API

release_latest_automatedfalse API

contributors_100cap100 API

contributor_top10_share_pct92 API

community_health_pct87 API

discussions_enabledtrue API

complexity_p9030 STATIC

hotspot_topconfig/runtime.exs,lib/plausible_web/email.ex,lib/plausible/teams/invitations.ex,lib/plausible_web/live/sites.ex,lib/plausible_web/controllers/stats_controller.ex,lib/plausible_web/controllers/api/stats_controller.ex,lib/plausible/sites.ex,lib/plausible_web/controllers/auth_controller.ex,lib/plausible_web/controllers/site_controller.ex,lib/plausible/teams.ex,lib/plausible/teams/billing.ex,lib/plausible/stats/legacy/legacy_query_builder.ex,lib/plausible/data_migration/backfill_teams.ex,lib/plausible_web/controllers/settings_controller.ex,extra/lib/plausible/stats/exploration.ex STATIC

dup_pct11.2 STATIC

dup_worst_pair.github/workflows/elixir.yml ↔ .github/workflows/elixir.yml (20 lines) STATIC

cve_count_critical0 STATIC

cve_count_high17 STATIC

cve_count_medium15 STATIC

secrets_found69 STATIC

secret_scan_depthworking tree + last 50 commits STATIC

smell_empty_catch0 STATIC

smell_dynamic_exec0 STATIC

smell_long_functions4 STATIC

smell_deep_nesting9 STATIC

smell_todo_density0 STATIC

dossier_tokens11254 COMPUTED

graph_coverage_pct100 COMPUTED

Claim traceability

Every judgment on the audit page, mapped to what backs it.

Claim	Backed by	Kind
Plausible offers both managed cloud and self-hosted deployment modes.	vitals-readme	OBSERVATION
PR review discipline is active, with most merges externally authored and reviewed.	health-static	MEASUREMENT
The open issue backlog is mostly stale.	health-static	MEASUREMENT
Core dashboard filtering logic (segments.ts) is exercised by the test suite.	probe-top-tested	VERIFICATION
Two onboarding-related README claims did not trace to matching code.	probe-claim-5 probe-claim-6	VERIFICATION

Coverage, provenance & bloat

How much of the repository this audit actually covered, who probably wrote it, and how heavy it is — informational, never part of the grade.

Coverage

structure mapped: 2002 files · dossier: 11254 tok · complete files: 2 · whole-function: 1 · probes: 13

Provenance

AI-likelihoodUNCLEAR

no direct AI-authorship signal present in the dossier

Bloat signal (lean 0 → heavy 10, descriptive only)

Index5.0

deps_direct—

deps_transitive—

install_footprint—

bundle_vs_category_median—

loc_to_api_ratio—

boilerplate_density—