Report · data as of Sep 26, 2026
State of starter kits, September 2026
We checked the public code of 88 open-source starter kits: commits, releases, and every core dependency against its latest version. Here's what a buyer should know before picking one.
- No commits in the last 90 days
- 64%
- Quiet 6+ months or archived
- 41%
- 1+ major behind on a core dependency
- 66%
56 of 88 kits
36 of 88 kits
TypeScript, Stripe SDK, React Native not counted
Maintenance
Dependency freshness
Which dependencies kits fall behind on
| Package | Latest | Kits using it | 1+ major behind |
|---|---|---|---|
| Prisma | 7.10.0 | 11 | 10 (91%) |
| Expo | 57.0.25 | 10 | 9 (90%) |
| NestJS | 12.1.0 | 7 | 6 (86%) |
| TypeORM | 1.1.1 | 7 | 6 (86%) |
| Vercel AI SDK | 7.0.116 | 9 | 7 (78%) |
| Nuxt | 4.5.2 | 3 | 2 (67%) |
| Express | 5.2.1 | 10 | 6 (60%) |
| Next.js | 16.3.6 | 44 | 24 (55%) |
| Zod | 4.6.5 | 43 | 23 (53%) |
| Drizzle | 0.45.3 | 19 | 9 (47%) |
| Tailwind CSS | 4.3.3 | 57 | 24 (42%) |
| React | 19.3.0 | 67 | 23 (34%) |
| tRPC | 11.19.0 | 7 | 2 (29%) |
| Supabase JS | 2.117.2 | 11 | 0 (0%) |
| Auth.js | 4.24.15 | 11 | 0 (0%) |
| Better Auth | 1.7.6 | 10 | 0 (0%) |
Packages used by at least 3 kits. "Behind" compares the lowest version a kit allows with npm's latest release.
Popular, but quiet
Well-known kits with no commits in over 6 months, or archived. They may still work, but you'll own the upgrades.
- Chatbot UIlast commit 826 days ago· 33,350 stars
- create-t3-applast commit 287 days ago· 29,142 stars
- Next.js SaaS Starter (Vercel)last commit 288 days ago· 16,148 stars
- Next.js Subscription Payments (Vercel)archived· 7,720 stars
- Node Express Boilerplatelast commit 1141 days ago· 7,660 stars
- create-t3-turbolast commit 288 days ago· 6,108 stars
- Precedentlast commit 723 days ago· 5,109 stars
- SaaS Boilerplate (Async Labs)last commit 554 days ago· 4,515 stars
Paid kits: can buyers check before they pay?
0 of 20 paid kits we track let buyers (or us) see maintenance activity and dependency versions before purchase. The rest ask buyers to trust the landing page. That's not a sign of poor quality, but it is a gap. How makers can close it.
Of the rest, 9 publish a dated public changelog we can read, and16 list prices we could confirm on their own site. Those pages show the vendor's claims, labeled as such.
Most active right now
- Catalyst (Agentic Next.js)185 commits by 1 contributor in 90 days
- Cloudflare Workers SaaS Template183 commits by 2 contributors in 90 days
- NestJS Microservice Boilerplate API134 commits by 3 contributors in 90 days
- Next SaaS Stripe Starter95 commits by 1 contributor in 90 days
- Cove Stack83 commits by 2 contributors in 90 days
Method
Data comes from the GitHub REST API and the npm registry, collected Sep 26, 2026. Commit activity counts the default branch only. Closed-source kits are excluded from the percentages because their code isn't public. Full rules: methodology. You're welcome to cite these numbers with a link back.