Open source, verifiably built
LibreNexus is MIT-licensed and was built against a predefined, public, reproducible quality benchmark. Every claim below links to evidence you can check yourself.
Project links
- Source code on GitHub, the complete application, specs, and quality pipeline.
- MIT license, use it, change it, sell services on it.
- Continuous integration runs, every push re-runs the full gate pipeline in public.
Quality evidence
The benchmark is defined in the repository under
specs/
and measured by tools, not opinions:
- Tests with line coverage of 80% or more
- Mutation score of 70% or more
- Static analysis at PHPStan level 7, zero errors
- Zero known dependency vulnerabilities
- Secret scanning and SAST, zero findings
- WCAG 2.1 AA accessibility on public pages
- Lighthouse performance budget of 90 or more
- A published software bill of materials (SBOM)
The full results live in the repository: the final quality report with coverage and mutation numbers, the per-epic review reports, and the security scans and SBOM, which every CI run regenerates and uploads as artifacts.
Reproduce the benchmark
With PHP 8.4, PostgreSQL, and Node installed, two commands rebuild the application and re-run every quality gate from a clean checkout:
make setup
make verify