← Back to home
Comparison · Infra & APIs

Forgejo vs SuperTokens

A side-by-side editorial comparison of Forgejo and SuperTokens — release velocity, themes, recent moves, and the top alternatives to consider.

Shared themes:self-hosted

Forgejo vs SuperTokens: at a glance

FeatureForgejoSuperTokens
SectorInfra & APIsInfra & APIs
Velocity score5.02.5
Sparks · 30d00
Top themesgit-hosting, self-hosted, open-source, patch-releasesauth, self-hosted, saml, security
Last editorial update17h ago10d ago
WebsiteVisit →Visit →

What is Forgejo?

Forgejo keeps patching its v15 stable line, now at v15.0.11.

Forgejo's newest tracked release is v15.0.11, two weeks after v15.0.10. Before that the feed jumped from v11.0.16 in July, with no v12–v14 releases in between. Release entries only link to external notes, so the specific changes in each patch aren't visible here.

Read the full Forgejo trajectory →

What is SuperTokens?

SuperTokens patches seven auth advisories and makes SAML IdP-initiated login opt-in by allow-list.

SuperTokens is a self-hostable auth backend that spent the v12 cycle hardening its security surface and extending multi-tenancy. The v12.3.0 canary in September added an append-only activity log for user lifecycle events. v12.0.11 is a security release: SAML replay protection and single-assertion binding, an ACS URL allow-list now required for IdP-initiated logins, tenant-scoped WebAuthn sign-in, a session/unlink race fix and dashboard session expiry checks, with additive schema migrations.

Read the full SuperTokens trajectory →

Forgejo vs SuperTokens: editorial side-by-side

F
Forgejo
INFRA · APIS
5.0

Forgejo keeps patching its v15 stable line, now at v15.0.11.

◆ Current state

Forgejo's newest tracked release is v15.0.11, two weeks after v15.0.10. Before that the feed jumped from v11.0.16 in July, with no v12–v14 releases in between. Release entries only link to external notes, so the specific changes in each patch aren't visible here.

◆ Where it's heading

The point-release rhythm continues: v11.0.x shipped roughly monthly from January to July, and v15 is now on its eleventh patch at a similar pace. Jumping four major versions in three months suggests majors are cut often and each branch then gets a patch series. Without the release notes, whether those majors bring large feature changes is unclear.

◆ Prediction

The likely next entry is v15.0.12 in two to four weeks. The entries don't show whether the v11 maintenance branch is still receiving fixes.

S
SuperTokens
INFRA · APIS
2.5

SuperTokens patches seven auth advisories and makes SAML IdP-initiated login opt-in by allow-list.

◆ Current state

SuperTokens is a self-hostable auth backend that spent the v12 cycle hardening its security surface and extending multi-tenancy. The v12.3.0 canary in September added an append-only activity log for user lifecycle events. v12.0.11 is a security release: SAML replay protection and single-assertion binding, an ACS URL allow-list now required for IdP-initiated logins, tenant-scoped WebAuthn sign-in, a session/unlink race fix and dashboard session expiry checks, with additive schema migrations.

◆ Where it's heading

Two tracks run in parallel: a stable 12.0 line that keeps closing authentication edge cases, much of it in SAML, and a 12.3 canary that adds stateful features such as the activity log. The new ACS allow-list requirement shows the project is willing to refuse insecure configurations by default rather than leave them to documentation.

◆ Prediction

Expect further 12.0.x security patches and, separately, the 12.3 activity log moving toward a stable release; the entries don't show when it will get a read API.

Alternatives to Forgejo and SuperTokens

Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Forgejo or SuperTokens.

See all Forgejo alternatives → · See all SuperTokens alternatives →

Recent activity from Forgejo and SuperTokens

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 1d agoForgejoForgejo v15.0.11: eleventh patch on the v15 stable line
  2. 11d agoSuperTokensSuperTokens 12.0.11: SAML replay protection and seven security fixes
  3. 15d agoForgejoForgejo v15.0.10: tenth patch on the v15 stable line
  4. 1mo agoSuperTokensSuperTokens v12.3: Activity log and lifecycle event system ⚡
  5. 2mo agoSuperTokensSuperTokens v12.0.10: SAML hardening
  6. 3mo agoForgejoForgejo v11.0.16 — monthly maintenance patch
  7. 3mo agoSuperTokensSuperTokens v12.0.5: Account linking fixes and migration guard
  8. 4mo agoSuperTokensv12.0.4-canary
  9. 4mo agoSuperTokensSuperTokens v12.0.3: Activity log table integration begins
  10. 4mo agoForgejoForgejo v11.0.15 — monthly maintenance patch
  11. 5mo agoForgejoForgejo v11.0.14 — monthly maintenance patch
  12. 6mo agoForgejoForgejo v11.0.13 — accelerated patch release

Frequently asked questions

What is the difference between Forgejo and SuperTokens?

Both compete on the same themes — self-hosted — within Infra & APIs. Forgejo is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Forgejo better than SuperTokens?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Forgejo is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.

What are the best alternatives to Forgejo?

Top Forgejo alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Forgejo alternatives" section above for the current picks, or visit /alternatives/forgejo for the full list with editorial commentary on each.

What are the best alternatives to SuperTokens?

Top SuperTokens alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "SuperTokens alternatives" section above for the current picks, or visit /alternatives/supertokens for the full list with editorial commentary on each.