saleor is by saleor — not by us.
We indexed this project so people can find it. We are not selling it, we host no copy of the code, and we are not affiliated with or endorsed by its authors — get it from them.
Indexed Aug 1, 2026 · 23,156 stars at index time. Maintainers: claiming verifies your identity and unlocks a higher assurance tier. Removal requests are honored.
Component · for humans & their agents
saleor
unclaimed listingactively maintainedFreeBSD-3-Clause
Saleor Core: the high performance, composable, headless commerce API.
by Open Source Community · New publisher
Every claim on this page is refundable if it is untrue — refund policy.
☆ Save**saleor/saleor** is an open-source project by saleor: Saleor Core: the high performance, composable, headless commerce API.. Indexed here so it can be found — not resold.
It is free. Get it from the upstream repository: https://github.com/saleor/saleor
From the project's own README (excerpt, reproduced for discovery under its BSD-3-Clause license):
Commerce that works with your language and stack
GraphQL native, API-only platform for scalable composable commerce.
Get to know Saleor: Talk to a human Talk to the API
Join our community: Website Twitter Discord
Blog Subscribe to newsletter
Table of Contents • What makes Saleor special? • Why API-only Architecture? • Features • Installation • Documentation • Saleor Platform • Storefront • Dashboard • Contributing • License
What makes Saleor special? • Technology-agnostic - no monolithic plugin architecture or technology lock-in. • GraphQL only - Not afterthought API design or fragmentation across different styles of API. • Headless and API only - APIs are the only way to interact, configure, or extend the backend. • Open source - a single version of Saleor without feature fragmentation or commercial limitations. • Cloud native - battle tested on global brands. • Native-multichannel - Per channel control of pricing, currencies, stock, product, and more.
Why API-only Architecture?
Saleor's API-first extensibility provides powerful tools for developers to extend backend using webhooks, attributes, metadata, apps, subscription queries, API extensions, dashboard iframes.
Compared to traditional plugin architectures (monoliths) it provides the following benefits: • There is less downtime as apps are deployed independently. • Reliability and performance - custom logic is separated from the core. • Simplified upgrade paths - eliminates incompatibility conflicts between extensions. • Technology-agnostic - works with any technology, stack, or language. • Parallel development - easier to collaborate than with a monolithic core. • Simplified debugging - easier to narrow down bugs in…
Preview
See what it does before you commit. Previews show behavior, never source code.
01Capabilities
Does
- + Programmatic API
- + Webhooks
- + Data synchronization
- + Role-based access control
- + Authentication
Doesn’t
- No exclusions declared
02Requirements & stack
Depends on
- → PostgreSQL database
- → Authentication
Credentials needed
None declared
Stack
03Community
No endorsements yetNo verified confirmations yet — be the first.
Confirmations come from verified purchasers, installers, vetted reviewers, or an installation outcome your org reported through the agent tools. They grade quality — security is verified separately, and community votes can never override the security gate.
Sign in to confirm — weight comes from verified usage, not vote count.
04Trust Passport
Full passport →0/0 automated components pass. An automated score is never a security guarantee.
This listing is unclaimed, so publisher identity cannot be verified and it stays below the “verified” tier by design — that is a statement about the listing, not about the project’s quality. Our automated scans still ran; a maintainer who claims it unlocks identity verification.
- publisher identity Publisher status verified; 0 verification(s) on file
- malicious pattern scan No known malicious-behavior patterns detected in reviewed content
- capability contract All 0 observed capability reference(s) match the declared manifest
- agent safety scan No injection patterns in agent-readable content
- provenance No release signature or provenance attestation
- behavioral sandbox Not performed in this environment — requires the production isolated runner (docs/sandbox-requirements.md). No untrusted code is ever executed on the application host.
Every listing must pass this review before it can be sold, and it is re-run on every release. Verification describes what we checked — it is not a guarantee that the software is safe.
05Versions
Full history →| Version | Channel | Released | Notes |
|---|---|---|---|
| 0.0.0 | stable | Aug 1, 2026 | Indexed listing — see the upstream repository for real release history. |