01Open source

Open source where it matters

The tracker is open, so anyone can verify what runs on their site and what it sends. The hosted dashboard is not open source, and we say that plainly.

glyphex-tracker

MIT

The browser script that runs on your site.

Used for

This is the code that collects pageviews and events. Read it to see exactly what leaves your visitors' browsers.

Read the codeLatest release v1.0.0

glyphex-wordpress

GPL-2.0+

The WordPress plugin.

Used for

Adds the tracking script to your WordPress site without editing theme files.

Read the codeLatest release v1.0.0

glyphex-pixel

Coming soon

The tracking pixel and short-link redirector.

Used for

Powers tracked short links and the pixel for emails and places where a script cannot run.

License MIT

glyphex-api

Coming soon

The @glyphex/api client and the @glyphex/mcp server.

Used for

Query your stats from code, or let an AI assistant read them over MCP.

License MIT

ai-traffic-list

Coming soon

The list of AI crawlers and AI referrers we detect.

Used for

The data behind AI traffic detection. Public domain, so you can reuse it anywhere.

License CC0

What we check before anything goes public

Nothing is published until it passes these checks.

  • A secrets scan of the full repository history.
  • No internal leakage: no infrastructure notes, customer data or internal paths.
  • A quality bar: clean builds and tests from a fresh clone, lint-clean code, working README commands.
  • An independent review of the exact code to be published, by someone who did not write it.
  • A private repository first, which we read as a stranger would before it goes public.
  • A named person signs off explicitly before anything is made public.
  • For the tracker: a build whose output matches the served script byte for byte.
How to verify the tracker build

Questions