Looking for a citable version? The 2026 Q3 edition is frozen and won't change.
Live report · data as of Oct 19, 2026 ()
State of Starter Kits
We checked the public code of 818 open-source starter kits (and the public pages of 21 paid ones): commits, releases, and every core dependency against its latest version. Here's what a buyer should know.
Headline findings
- 52% of the 818 open-source starter kits we track had no commits in the last 90 days.
- 40% have been quiet for six months or more, or are archived.
- 46% are at least one major version behind on a core dependency.
- Expo: 23 of 24 kits (96%) are behind the latest major version.
- 0 of 21 paid kits let buyers check maintenance activity before paying.
- No commits in the last 90 days
- 52%
- Quiet 6+ months or archived
- 40%
- 1+ major behind on a core dependency
- 46%
429 of 818 kits
330 of 818 kits
TypeScript, Stripe SDK, React Native not counted
Grades
Open-source kits only. A fixed lookup from maintenance and dependency freshness. How grades work.
Maintenance
Dependency freshness
Which dependencies kits fall behind on
| Package | Latest | Kits using it | 1+ major behind |
|---|---|---|---|
| Expo | 58.0.14 | 24 | 23 (96%) |
| OpenAI SDK | 3.35.1 | 36 | 34 (94%) |
| SvelteKit | 3.1.0 | 13 | 12 (92%) |
| TypeORM | 1.1.2 | 17 | 15 (88%) |
| pandas | 3.0.6 | 24 | 21 (88%) |
| NestJS | 12.1.3 | 24 | 20 (83%) |
| Vercel AI SDK | 7.0.143 | 39 | 30 (77%) |
| Prisma | 7.10.1 | 42 | 28 (67%) |
| Django | 6.1.2 | 15 | 10 (67%) |
| NumPy | 2.5.4 | 25 | 14 (56%) |
| Nuxt | 4.6.2 | 11 | 6 (55%) |
| Express | 5.3.0 | 62 | 33 (53%) |
| Drizzle | 0.45.4 | 54 | 28 (52%) |
| Next.js | 16.4.2 | 195 | 98 (50%) |
| LangChain | 1.4.6 | 42 | 21 (50%) |
| Zod | 4.6.7 | 191 | 91 (48%) |
| Astro | 7.4.0 | 35 | 16 (46%) |
| Tailwind CSS | 4.3.3 | 289 | 110 (38%) |
| React | 19.3.1 | 331 | 119 (36%) |
| Flask | 3.1.3 | 12 | 4 (33%) |
| tRPC | 11.19.0 | 12 | 4 (33%) |
| Vue | 3.5.44 | 38 | 4 (11%) |
| SQLAlchemy | 2.1.5 | 47 | 4 (9%) |
| Pydantic | 2.14.1 | 93 | 4 (4%) |
| Better Auth | 1.7.11 | 31 | 0 (0%) |
| Auth.js | 4.24.15 | 30 | 0 (0%) |
| Supabase JS | 2.118.0 | 29 | 0 (0%) |
| Celery | 5.6.3 | 14 | 0 (0%) |
| Streamlit | 1.66.0 | 12 | 0 (0%) |
| Django REST framework | 3.18.3 | 11 | 0 (0%) |
| Convex | 1.47.0 | 6 | 0 (0%) |
Popular, but quiet
Well-known kits with no commits in over 6 months, or archived. They may still work, but you'll own the upgrades.
- Chatbot UIlast commit 848 days before this report · 33,326 stars
- create-t3-applast commit 309 days before this report · 29,161 stars
- Taxonomy (shadcn)last commit 181 days before this report · 19,281 stars
- Next.js SaaS Starter (Vercel)last commit 311 days before this report · 16,191 stars
- Next.js Subscription Payments (Vercel)archived · 7,710 stars
- Node Express Boilerplatelast commit 1163 days before this report · 7,668 stars
- OpenAI Realtime Agentslast commit 284 days before this report · 7,002 stars
- developerFoliolast commit 730 days before this report · 6,635 stars
- create-t3-turbolast commit 311 days before this report · 6,109 stars
- react-native-boilerplatelast commit 188 days before this report · 5,564 stars
Paid kits: can buyers check before they pay?
0 of 21 paid kits let buyers see maintenance activity and dependency versions in code before purchase.10 publish a dated public changelog, and 18 list prices we could confirm on their own site.How makers can close the gap.
Most active
- nextjs-nestjs-oauth-rbac-boilerplate3424 commits by 2 contributors in 90 days
- twenty3275 commits by 104 contributors in 90 days
- redcell3044 commits by 1 contributor in 90 days
- comfyui-mcp2550 commits by 13 contributors in 90 days
- ruflo2420 commits by 32 contributors in 90 days
Cite this report
You're welcome to quote any number here with a link back. Journalists and bloggers: the data file has every figure.
kitproof, "State of Starter Kits", Oct 19, 2026. https://kitproof.dev/report/