GrimoireLab
GrimoireLab: Self-hosted analytics for studying activity across repositories and development systems. Ranked #13 of 15 in Open Source Package Health Tools by our editors (6.5/10); pricing: Free plan; best for organizations analyzing open-source project activity.
At a glance
- Editor score6.5 / 10
- PricingFree plan
- Best forOrganizations analyzing open-source project activity
- Free planYes
- Paid fromFree
- Package health scoringNo
- Facts checked26 Sep 2026
Where it wins
- Collects and enriches data from repositories, issue trackers, forums, and CI systems
- SortingHat supports contributor identity management across project data
- Dashboards, visualizations, and Manuscripts support analysis and reporting
Where it doesn't
- Requires self-hosting and configuration of components and supporting services
- Does not provide package health scoring, dependency alerts, or license analysis
- The 1.x platform is in maintenance mode as development focuses on 2.0
Our verdict on GrimoireLab
GrimoireLab is an open-source toolkit for collecting, enriching, and analyzing software development activity. It is aimed at developers, managers, researchers, and open-source communities that want to study activity across repositories, issue trackers, forums, and other development systems. Its scope is project analytics rather than package-health scanning: it can help teams understand development activity, but it is not positioned as a tool for assessing package risk or dependency health.
The toolkit brings together components for data retrieval, enrichment, identity management, orchestration, and reporting. SortingHat supports contributor identity management, while dashboards and visualizations present project metrics; the Manuscripts component supports reporting. Listed integrations include Git, GitHub, GitLab, Bugzilla, JIRA, Gerrit, Discourse, Jenkins, Slack, Mattermost, Confluence, and MediaWiki. That breadth suits organizations combining activity signals from several development systems, but using the toolkit means configuring and operating its components in a self-hosted environment rather than relying on a hosted analytics service.
For package-health workflows, the boundary is important: GrimoireLab does not provide health scoring, dependency alerts, license analysis, or SBOM support. Organizations seeking those functions should choose a package-health scanner instead. The project roadmap also says the 1.x platform is in maintenance mode while active development focuses on GrimoireLab 2.0, a relevant consideration for teams planning a deployment. It is a better fit for organizations that can manage self-hosted analytics and need broad views of project activity than for teams looking for automated package-risk checks or a turnkey service.
Your product? Our editors can test GrimoireLab in depth and publish a review, labelled as paid · from $149/mo →
GrimoireLab pricing
GrimoireLab fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Package health scoring | No |
| Dependency alerts | No |
| License analysis | No |
| Package ecosystems | Git, GitHub, GitLab, Bugzilla, JIRA, Gerrit, Discourse, Jenkins, Slack, Mattermost, Confluence, MediaWiki |
| Repository platforms | Git, GitHub, GitLab |
| SBOM support | No |
| Deployment | Self-hosted |
| Platforms | Linux |
| Support | Community |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 12 integrations: Git, GitHub, GitLab, Bugzilla, JIRA, Gerrit … |
| Pricing | Free plan |
| Website | grimoirelab.github.io |
| Facts checked | 26 Sep 2026 |
GrimoireLab integrations
GrimoireLab lists 12 integrations on its own site.
- Git
- GitHub
- GitLab
- Bugzilla
- JIRA
- Gerrit
- Discourse
- Jenkins
- Slack
- Mattermost
- Confluence
- MediaWiki
Alternatives to GrimoireLab
- Sonatype LifecyclePolicy-driven SCA with broad ecosystem coverage, SBOMs, reachability, and continuous monitoring.9.2
- Endor LabsMaps vulnerable dependency reachability and connects findings to remediation workflows.8.8
- SocketBroad dependency risk coverage, with cloud-only deployment and paid plans from $25 per developer monthly.8.6
See all GrimoireLab alternatives →
Used GrimoireLab? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used GrimoireLab for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
GrimoireLab is listed in our Open Source Package Health Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/grimoirelab/"><img src="https://www.itechguides.com/best/badge/grimoirelab.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update