mrkeyoor.com_
Wed 16 Sept 05:24 UTC
Self-Hostedevaluationupdated 26 Aug 2026

core review

Home Assistant Core is the Python application behind Home Assistant, a home automation system built around local control and privacy. It joins devices and services in one place so automations can react to sensors, schedules, and household events without making a cloud account the center of the home.

+194stars / 7d
Verdict

Our Home Assistant Core checkout installed 141 packages and built successfully, but its tests stopped on a missing freezegun import and pip-audit found 3 known vulnerabilities, so contributors should use the documented development environment instead of treating a fresh clone as ready. For a household, Home Assistant remains the first self-hosted platform to try when local device control and broad integration coverage matter. Install Home Assistant OS unless you have a concrete reason to own the container or Python runtime yourself.

We ran it

Lab card: what happened when we ran coreScreenshot of core (www.home-assistant.io)
Install✓ · 96s141 packages · 309 MB
Build✓ · 34s
Tests✗ · 10sran, no count parsed
Known vulns3(pip-audit)
Repo27218 files~3,560,375 lines of source · 189.1 MB · 13 CI workflows · Dockerfile · tests dir

Answers from our run

Does core build from source?

Dependencies installed in 96 seconds (141 packages), and the build succeeded in 34 seconds. We cloned commit dcbd43b into a clean Debian container with 3 CPUs and no project-specific setup.

Do core's tests pass?

The test command failed in our container, and its output did not report a pass or fail count.

Does core have known vulnerabilities in its dependencies?

pip-audit flagged 3 known advisories in the dependency tree at the time of our run.

Who should not use core?

Anyone who wants a zero-maintenance appliance but plans to run the Core repository directly: the official installation page recommends Home Assistant OS for most users, while a Core development checkout needs a specific Python toolchain.

What are the alternatives to core?

openHAB, Domoticz, Node-RED. Our Home Assistant Core checkout installed 141 packages and built successfully, but its tests stopped on a missing freezegun import and pip-audit found 3 known vulnerabilities, so contributors should use the documented development environment instead of treating a fresh clone as ready.

Setup3/5OS install is guided; direct Core development needs a tuned environment
Docs5/5User, integration, architecture, and contributor guides are extensive
Community5/590,112 stars and same-day issue and pull-request activity
Maturity5/5Frequent patch releases support a very large integration surface

Discussed on

  1. hnAI agent on GitHub gives recipe for blueberry pie4 points
  2. hnHomeAssistant – open-source home automation that puts control and privacy first3 points

Who it’s for

Households that want local control over supported lights, sensors, locks, media devices, and energy gear.
Tinkerers willing to maintain a small server and investigate integration-specific faults.
Python developers building or repairing Home Assistant integrations.
Privacy-conscious users who prefer automations to keep working when an outside service is unavailable.

Who it’s NOT for

Anyone who wants a zero-maintenance appliance but plans to run the Core repository directly: the official installation page recommends Home Assistant OS for most users, while a Core development checkout needs a specific Python toolchain.
Renters or households unable to reach device radios and networks from the host: the developer guide warns that containers complicate access to USB Bluetooth and Zigbee adapters.
Teams expecting every vendor integration to behave uniformly: the 2026.8.3 release contains fixes across Sonos, Shelly, Signal, Vizio, Reolink, and other integrations, and an open Total Connect report describes intermittent startup timeouts.
People who dislike frequent operational change: the project was pushed on 2026-08-26 and the 2026.8.3 patch release shipped five days earlier.

Setup reality

Our sandbox install succeeded in 96 seconds, adding 141 packages and using 309 MB. The build then succeeded in 34 seconds. Tests stopped after 10 seconds with exit 4 because tests/conftest.py could not import freezegun; pip-audit reported 3 known vulnerabilities.

That source checkout is mainly the developer path. The official setup guide points contributors to a VS Code dev container and requires Python 3.14.2 or newer for the manual route. Ordinary users are directed to Home Assistant OS or Home Assistant Container, then must connect each device or service and supply whatever network access or credentials its integration requires.

Hardware access is the practical snag. The developer guide says USB Bluetooth and Zigbee adapters can be harder to expose inside a container. Home Assistant Container also leaves host updates and container management to you, while Home Assistant OS includes the managed appliance layer and is the recommended choice for most installations.

Home Assistant OS is the product most households should install

Home Assistant Core is the Python application that discovers devices, stores their state, runs automations, and exposes the interface used by the wider Home Assistant system. The project README describes local control and privacy as its purpose, with a modular integration system for adding devices and actions. That is a useful promise for a home: lights, sensors, media players, calendars, and vendor services can participate in one automation model instead of living in separate apps.

The source repository is easy to mistake for the normal installation. It is not. The official installation guide recommends Home Assistant OS for most people bringing their own hardware. That image supplies the managed operating layer, updates, backups, and optional apps. Home Assistant Container is for operators who already manage Linux and Docker. A direct Core checkout is best understood as the contributor route, which matters when judging the 27,218-file repository we tested.

This division makes the buying decision simpler. A homeowner should compare the supported integrations and pick suitable hardware, then start with Home Assistant OS. A Python developer fixing an integration needs the Core repository and its development setup. Running raw Core as though it were a small standalone script gives you work that the OS image is designed to absorb.

Local control still depends on each device and vendor

Home Assistant can keep its state and automation engine on your own machine, but an integration may still talk to a vendor account or remote API. Each device therefore deserves its own check in the integration directory. Confirm whether it works locally, requires credentials, depends on a cloud service, or needs a radio such as Bluetooth or Zigbee. The platform offers a common home, not a guarantee that every attached product becomes local.

The 2026.8.3 release notes show the maintenance cost of that breadth. That patch touched Sonos, Supla, Shelly, Signal Messenger, Vizio, Reolink, Enphase, Volvo, and several other integrations. Home Assistant had 3,652 open issues and pull requests when we fetched its repository facts on 2026-08-26. That number combines feature work, fixes, and proposed code, so it is evidence of scale and activity rather than a defect count.

A competent operator should expect occasional device-specific diagnosis. One open Total Connect report describes correct credentials and intermittent startup failure under Home Assistant OS, with the log ending in a global bootstrap timeout. That report does not establish a platform-wide fault. It does show why checking the issue tracker for your most important lock, alarm, camera, or energy integration is more useful than relying on the platform's overall popularity.

What happened when we ran it

Our install at commit dcbd43b succeeded in 96 seconds. It added 141 packages and occupied 309 MB in a fresh Debian container with 3 CPUs and 8 GB of RAM. The build completed in another 34 seconds. Those results say the source and its declared runtime dependencies can be assembled in a clean Python 3.12 image, though that image differs from the newer Python version in the current contributor guide.

The test command failed after 10 seconds with exit 4. Pytest did not reach the suite because tests/conftest.py imported freezegun, which was absent, and the final error was ModuleNotFoundError: No module named 'freezegun'. The log does not say why that package was missing, so we will not assign a cause. For a contributor, the useful conclusion is narrower: our successful install did not produce a test-ready checkout.

Pip-audit also reported 3 known vulnerabilities in the installed environment. That result is a reason to inspect the exact advisories and the project's dependency policy before exposing a development image or basing another product on it. It is not evidence that a normal Home Assistant OS installation is remotely exploitable. The run covered the Core checkout in an unprivileged container with no secrets, not the managed appliance image.

The documented contributor path avoids a generic Python setup

Home Assistant's developer guide steers contributors toward Visual Studio Code and a dev container. The manual route currently calls for Python 3.14.2 or newer and a list of development libraries. That detail helps explain why a generic Python image is a weak stand-in for the supported workflow, even though our build succeeded. Use the project's environment before reporting a broken suite upstream.

Containers introduce their own hardware boundary. The same guide warns that exposing onboard Bluetooth, Zigbee, and USB adapters can be difficult inside a development container. Production container users also own the Linux host and updates. Home Assistant OS reduces that burden, which is why the recommendation is more than beginner-friendly packaging. It controls a larger share of the environment in a system where radios and network discovery are part of normal operation.

Active maintenance is the trade for broad compatibility

The repository was pushed on 2026-08-26, and release 2026.8.3 had arrived on 2026-08-21. Its 13 CI workflow files, Dockerfile, and dedicated tests directory match a project that treats changes across a large integration catalog as continuous work. The Apache 2.0 license is clear for the Core code, and the architecture documentation gives integration authors a defined extension path.

Choose Home Assistant when you want one local automation model and are prepared to verify the few integrations your household cannot live without. Choose openHAB when its bindings or Java extension model fit your existing work, Domoticz for a smaller traditional server, or Node-RED when the job is mainly visual message flow. Home Assistant's advantage is the joined household experience. Its cost is keeping that wide and changing edge of device support healthy.

Our run is most relevant to contributors: 189.1 MB of source, 309 MB of installed dependencies, a clean build, and a test bootstrap failure. Household users should not reproduce that route for sport. Use Home Assistant OS, keep backups, and judge reliability by the exact devices and services that will control heat, access, lighting, and alarms.

Alternatives

ProjectWhat it isPick it when
openHABA Java-based home automation platform with its own rules, bindings, and local runtime.pick this instead when your existing automation work is built around openHAB bindings or its Java and OSGi extension model.
DomoticzA compact home automation server with a long history on small local machines.pick this instead when you want a lighter traditional dashboard and your devices are covered by Domoticz.
Node-RED gh↗A visual flow editor often used to connect devices, APIs, and message brokers.pick this instead when visual event flows matter more than a full household device registry and ready-made home UI.

What people are saying

  1. [lobsters] Adding CPU affinity in a 24-core build machine made builds take longer
  2. [hackernews] TigerBeetle Core System Architecture: Deconstructing Performance Engineering
  3. [hackernews] Os8088.com: IBM XT OS now has a Browser, CP/M 2.2 with Z80 core and MS Word 1.1a
  4. [hackernews] St Lucie Nuclear Reactor Unit 1 manually shutdown, 3 control rods drop into core
  5. [github-trending] XTLS/Xray-core
  6. [github-trending] vuejs/core

Sources

  1. Home Assistant Core README
  2. Home Assistant installation guide
  3. Home Assistant developer environment guide
  4. Home Assistant Core 2026.8.3 release
  5. Total Connect setup timeout issue

More self-hosted reviews

newsnow · forem · octo-server · runtime · openfang · SparkyFitness · the whole board →