SvelteKit is the full-stack framework for Svelte apps with routing, SSR, and adapters. This gallery lists 697 open-source projects built with SvelteKit, most of them in DevTools, UI Kits and Blogs, ranked by GitHub stars so the most-adopted repositories come first.
Projects are public GitHub repositories found with the GitHub search query “topic:sveltekit” and at least 20 stars. Each repository is checked against SvelteKit’s languages and ecosystem before it is categorized, and stars, forks and last-commit dates come straight from the GitHub API, refreshed daily (current snapshot: October 6, 2026). Nothing here is paid placement.
A DNS-rebinding vulnerability in the Natural Language Toolkit (NLTK) allows SSRF attacks against internal services. SvelteKit itself is not affected, but review your Python-based data processing dependencies.
A high-severity (CVSS 7.5) advisory shows @typespec/spector exposes an unauthenticated POST /.admin/stop endpoint that exits the process. This briefing explains facts, impact, dependency-chain relevance, verification guidance, and remediation steps for maintainers and operators.
A medium-severity ReDoS vulnerability in SvelteKit's content negotiation logic permits unauthenticated attackers to exhaust CPU via specially crafted Accept headers. All versions through 2.70.1 are affected; upgrade to 2.70.2 to remediate.
