Self-hosted Analytics: what licence are you actually agreeing to

“Self-hosted” and “open source” are not the same promise, and the lists that recommend these projects rarely separate them. This page sorts 34 analytics projects by the licence you are actually agreeing to, as read on 2026-08-20.

16 of 34 are permissive: run them, change them, keep your changes to yourself. 11 are AGPL, where serving a modified copy over a network obliges you to publish those changes, which is the clause that catches people who self-host for a team. 1 is not open source at all, carrying a proprietary or restricted-use licence. The remaining 6 are ordinary copyleft.

Project	Licence	What that means	Stars	Maintenance	Language
Superset	Apache-2.0	Permissive, no strings	74,318	Active	Python
Umami	MIT	Permissive, no strings	38,281	Active	TypeScript
PostHog	MIT	Permissive, no strings	37,802	Active	Python
Netron	MIT	Permissive, no strings	33,369	Active	JavaScript
Redash	BSD-2-Clause	Permissive, no strings	28,758	Active	Python
Druid	Apache-2.0	Permissive, no strings	14,044	Active	Java
Litlyx	Apache-2.0	Permissive, no strings	1,741	Slowing	TypeScript
Middleware	Apache-2.0	Permissive, no strings	1,621	Active	TypeScript
GoModel	MIT	Permissive, no strings	1,072	Active	Go
Offen	Apache-2.0	Permissive, no strings	979	Active	JavaScript
Medama Analytics	Apache-2.0, MIT	Permissive, no strings	639	Active	Go
Daily Stars Explorer	MIT	Permissive, no strings	398	Active	JavaScript
Liwan	Apache-2.0	Permissive, no strings	199	Active	Rust
HitKeep	MIT	Permissive, no strings	82	Active	Go
ANALOG	MIT	Permissive, no strings	48	Active	TypeScript
d8a.tech	MIT	Permissive, no strings	18	Active	Go
Matomo	GPL-3.0	Copyleft, publish your changes	21,793	Active	PHP
GoAccess	GPL-2.0	Copyleft, publish your changes	20,828	Active	C
GoatCounter	EUPL-1.2	Copyleft, publish your changes	5,894	Active	Go
Socioboard	GPL-3.0	Copyleft, publish your changes	1,494	Active	JavaScript
Shaper	MPL-2.0	Copyleft, publish your changes	1,234	Active	Go
AWStats	GPL-3.0	Copyleft, publish your changes	434	Slowing	Perl
Metabase	AGPL-3.0	AGPL, network copyleft	48,846	Active	Clojure
Postiz	AGPL-3.0	AGPL, network copyleft	34,893	Active	TypeScript
Plausible Analytics	AGPL-3.0	AGPL, network copyleft	28,674	Active	Elixir
Rybbit	AGPL-3.0	AGPL, network copyleft	12,790	Active	TypeScript
Countly Community Edition	AGPL-3.0	AGPL, network copyleft	5,888	Active	JavaScript
Vince	AGPL-3.0	AGPL, network copyleft	2,014	Slowing	Go
Aptabase	AGPL-3.0	AGPL, network copyleft	1,777	Active	TypeScript
EDA	AGPL-3.0	AGPL, network copyleft	204	Active	TypeScript
Prisme Analytics	AGPL-3.0, MIT	AGPL, network copyleft	129	Slowing	TypeScript
Swetrix	AGPL-3.0	AGPL, network copyleft	72	Active	Shell
Statistics for Strava	AGPL-3.0	AGPL, network copyleft	6	Active	HTML
RudderStack	Elastic-2.0	Not open source, restricted use	4,474	Active	Go

What the licence column means

Permissive (MIT, Apache-2.0, BSD, ISC): do what you like, keep changes private.
Copyleft (GPL, LGPL, MPL, EPL): changes you distribute must ship their source.
AGPL, network copyleft: the same, and running it for others over a network counts as distribution. This is the one that surprises people who self-host for a team or a side business.
Source-available (SSPL, BUSL, Elastic, Commons Clause): not open source. Reading and self-use are usually fine; offering it as a service is not.
Other / unstated: the dataset lists no licence we could classify. Check the repo before you rely on it.

The Maintenance column is a second, independent check: the age of the most recent commit on the default branch, read from the GitHub API on 2026-08-20. Active is within 180 days, Slowing is 180 to 365, Dormant is over a year, Archived means the maintainer marked the repo read-only, and Not measured means the project is hosted outside GitHub so the check does not apply.

Source data from awesome-selfhosted-data, used under CC BY-SA 3.0. Licence family grouping and maintenance status are computed by this site (from the upstream licence fields and the GitHub API) and are not part of the upstream dataset. Licence classification is a summary, not legal advice: check the project’s own LICENSE file before you rely on it. This page is published under the same licence.