Automation and internal tools

Windmill

Scripts, flows, and internal UIs. The core is AGPL.

Partial score

WebsiteCodeDeploy

8/19 signals

Why this score

Not enough measured signals for Owner-safe, and the score is outside the Needs-a-techie band. Captured 2026-10-15. Unmeasured signals add nothing and are not treated as failures.

Alive14/20
  • Last push. 8 points. GitHub pushed_at was 0 days before 2026-10-15.
  • Releases in 12 months. 6 points. The public releases feed shows at least 10 tagged releases in the last 12 months.
  • How fast issues close. Not measured. Median issue-close time is not in the seed snapshot, so this signal is omitted.
Trusted2/20
  • OpenSSF Scorecard. Not measured. No Scorecard result in the snapshot.
  • Open critical or high vulnerabilities. Not measured. Open vulnerability counts were not fetched. We do not assume zero.
  • Contributors in 90 days. Not measured. 90-day contributor counts were not fetched.
  • Bus factor. Not measured. Contributor share was not fetched.
  • Stars. 2 points. 18,186 stars, log-scaled and capped at 20,000.
Takeoverable8.3/25
  • Licence. 6 points. Licence class network copyleft.
  • Stack. 2.3 points. Rust. TypeScript, JavaScript, Python, Go, PHP, and Vue score as widely hireable.
  • Tests and CI. Not measured. We did not confirm a test suite. Missing CI at the usual paths is treated as unknown, not as a failure.
  • Docs quality. Not measured. Docs quality is an LLM rubric. v1 does not invent that score.
  • Data export. Not measured. Data-export was not audited app by app, so it is omitted.
Easy to run9/20
  • One-click deploy. Not measured. No one-click host was verified for this app, so the signal is omitted rather than scored as a failure.
  • Managed cloud or done-for-you. 5 points. SeatLess offers done-for-you setup. A vendor cloud, where listed, is the vendor’s own hosting, not a licence you own.
  • Docker Compose. 4 points. A Dockerfile or Compose file is in the repository.
  • Memory needs. Not measured. Memory needs were not measured.
  • Setup steps. Not measured. Setup-step rubric was not run.
Feature fit13.1/15
  • Coverage of the incumbent’s main jobs. 13.1 points. Editorial reading of public docs. Not a certified feature audit. Unknown jobs are left out of the average.

What it replaces

Windmill runs scripts and flows and can turn them into internal tools. The licence file says backend and frontend are AGPL-3.0 except enterprise-gated code, which is proprietary. It is as much a developer platform as a no-code Zapier.

Feature coverage vs Zapier

Editorial, from public descriptions. A dash means we did not assess that job. This is not a lab test, and Zapier has not reviewed it.

JobWindmill
Multi-step flows✓
A large app catalogue◐
Schedules and webhooks✓
Runs on your server✓

Licence, in plain language

AGPL-3.0 Network copyleft

You can use, change, and run it. If you offer the software as a service, you share the changes you make. That is the usual Affero GPL bargain.

AGPL-3.0 except enterprise-gated snippets, which are proprietary. Some code is Apache-2.0. See LICENSE.

Repository health

Stars18,186
Forks1,117
Open issues855
Last push2026-10-14
Last tagged release2026-10-14
Releases in 12 months10 or more
OpenSSF ScorecardNot in the snapshot
LanguageRust
ArchivedNo

Similar in Automation and internal tools

Suggest an edit