I'm trying to create a web app with flask and most tutorials I can find recommend using flask-login, however the last release was around two and a half years ago and the last commit was nine months ago. The only statement I could find is this issue where the maintainer says it's still maintained but there has only been one new commit since then. Is it still safe to use, if not, what alternatives are there?

you are viewing a single comment's thread
view the rest of the comments

[–] hendrik@palaver.p3x.de 2 points 1 week ago* (last edited 1 week ago) (1 children)

I think Quart is the more modern (async) Flask successor. Or people use FastAPI, ... That's where active development happens. The Flask ecosystem is more stable, mature I guess? There's plenty old plugins without recent updates. But most I had a look at were written in a very clean way, and they're probably perfectly fine. Unless they're niche or you find some discussion about security-related stuff in the bugtracker.

[–] SatansDaughter@piefed.blahaj.zone 3 points 1 week ago (1 children)

Quart looks interesting but I'll probably stick with flask for now. I figured flask-login was probably fine but I wanted confirmation

[–] hendrik@palaver.p3x.de 1 points 1 week ago

Solid choice. I like Flask's design. They have good documentation as well. And PieFed (and probably lots of other projects) also rely on flask-login and all these extensions.