Saleor vs Vendure

Saleor vs Vendure
Fact	Saleor	Vendure
Language	Python	TypeScript
Licence	BSD-3-Clause	Other
Stars	23k	8.5k
Latest	3.23.39	v3.7.4
Last push	2026-10-06	2026-10-06
Release cadence	about 3 days between releases	about 25 days between releases
Active contributors	8 commit authors on the default branch in the last 90 days	41 commit authors on the default branch in the last 90 days
Flags	none	none

How they relate

Both replace Shopify. Alternatives to Shopify →
PartialSaleorA headless GraphQL commerce API; the storefront is yours to build.
PartialVendureA headless commerce server in TypeScript with a GraphQL API and an admin UI; the storefront is yours to build.

3.23.392026-10-06Fixes:
3.22.722026-10-02Upgraded urllib3 to fix CVE-2026-97689, CVE-2026-97688, CVE-2026-97687
3.23.382026-10-02Dependencies & security:
3.23.372026-09-30ci: replace path filters in tests and e2e with an in-job change check
3.22.712026-09-24Upgraded pyjwt to 2.15.0 to fix GHSA-x33g-cr3x-6449, GHSA-42vr-xj54-vc7v

v3.7.42026-10-05Vendure v3.7.4 is a patch release containing fixes for two reported vulnerabilities (one high, one low), clearer report…
v3.7.32026-09-02Vendure v3.7.3 is a patch release containing fixes for eleven reported vulnerabilities (four critical, two high, five m…
v3.7.22026-08-03Vendure v3.7.2 is a patch release containing fixes for four reported vulnerabilities (one critical, one high, two mediu…
v3.7.12026-07-14A maintenance patch on top of 3.7.0. It fixes a batch of core, dashboard, and @vendure/create issues, moves a stray typ…
v3.7.02026-07-01Vendure Core v3.7 focuses on developer experience, dashboard extensibility, and security hardening. It adds first-class…

✓ signed The latest release, 3.23.39, carries a signature GitHub verified.

Loading the security report

unsigned The latest release, v3.7.4, carries no signature GitHub could verify.

Loading the security report