SaaS starters · Rank #60
open-source-saas-boilerpate
Grade D: derived only from the two verdicts below. How grades work
Free SaaS boilerplate (Python/PostgreSQL/ReactJS/Webpack)
Why this verdict
How we check →- No commits in 90 days; last commit 99 days ago. receipt ↗
- React 16 declared; latest is 19 (3 majors behind). receipt ↗
- Flask 1 declared; latest is 3 (2 majors behind). receipt ↗
- SQLAlchemy 1 declared; latest is 2 (1 major behind). receipt ↗
Snapshot: commit c061c1d on master, checked 2026-10-19 06:23 UTC. Receipts link to files at this exact commit.
- Two or more breaking releases behind on a core dependency.
Dependency freshness
| Package | Declared | Latest | Status |
|---|---|---|---|
| React react | 16.13.1 | 19.3.1 | 3 majors behind |
| Flask flask | 1.0.2 | 3.1.3 | 2 majors behind |
| SQLAlchemy sqlalchemy | 1.3.10 | 2.1.5 | 1 major behind |
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What's in the stack
- Framework
- Flask
- Database / ORM
- SQLAlchemy, PostgreSQL (psycopg), Alembic
Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.
What the README says you get
- APIAutomatic API importing
Automatic importing APIs, namespaces (when add a new API you don't need to import it explicitly, you just need to name it *api.py*)
- AuthEmail authentication
Email authentication (with email confirmation)
- AuthUser registration and login
User registration, login, logout
- AuthJWT token authentication
The authentication is implemented with using JWT.
- AuthCookie-based tokens
we use cookie-based token as for it's most safe method of using tokens at the moment
- AuthLogin-required endpoint wrapper
To protect endpoints and make them accessible only if user is authenticated, use this wrapper.
- DataDatabase scaffolding
Contains functions to update database based on the current db_models.
- DeployAWS Beanstalk friendly
AWS Beanstalk-friendly (you don't need to change any files' names to start deploying the project there)
- EmailTransactional email service
Can be used for the sending transactional email.
- UIResponsive design
Responsive design
- UIAlert components
Styled block with and icon and text. There are 4 types of alerts:
- UIDropdown menu
Dropdown menu is used in the header of the dashboard.
- UICollapsible left menu
Responsive, collapsible menu with any amount of items on each level.
Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote; 1 unverifiable item was discarded. A README claim is the maker's description, not something we tested.
Watch open-source-saas-boilerpate
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 19, 2026 | Slowing | 2+ majors behind | 0 |
| Oct 12, 2026 | Slowing | 2+ majors behind | 0 |
| Sep 29, 2026 | Steady | 2+ majors behind | 1 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (master) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- package.json ↗ declared dependency versions and stack (at commit c061c1d)
- requirements.txt ↗ declared dependency versions and stack (at commit c061c1d)
- README ↗ quoted features at the checked commit
- npm registry ↗ latest versions (each linked in the table above)
- PyPI ↗ latest versions of Python packages (each linked in the table above)