# Astro, release history and use on real websites.

A web framework focused on content-driven websites with minimal client-side JavaScript. It supports the islands architecture and integration with React, Vue, Svelte, and more. Ideal for blogs, documentation, and marketing sites.

- **Status:** Modern. Actively developed, Astro 7 released in 2026.
- **Category:** [JS/CSS Frameworks](https://be1st.ai/technologies/framework)
- **First release:** 2021
- **License:** MIT
- **Latest version:** 7.4.7 (5 Nov 2026)
- **Official website:** https://astro.build
- **Documentation:** https://docs.astro.build
- **GitHub:** https://github.com/withastro/astro
- **Page:** https://be1st.ai/technologies/framework/astro

## Astro on audited websites

405 of the 16,845 websites audited by be1st run Astro (2.4%). That ranks it #8 of the 35 technologies in JS/CSS Frameworks we have seen in audits.

### Websites running Astro vs all websites

- **Web score:** 82 (all websites 72)
- **SEO:** 88 (all websites 79)
- **Security:** 65 (all websites 59)
- **Performance:** 84 (all websites 72)
- **AI Readiness:** 38 (all websites 31)

### Most used in JS/CSS Frameworks

1. [Tailwind CSS](https://be1st.ai/technologies/framework/tailwind-css): 34% (5,653)
2. [jQuery](https://be1st.ai/technologies/framework/jquery): 29% (4,883)
3. [Next.js](https://be1st.ai/technologies/framework/next-js): 23% (3,836)
4. [React](https://be1st.ai/technologies/framework/react): 22% (3,626)
5. [Bootstrap](https://be1st.ai/technologies/framework/bootstrap): 13% (2,198)
6. [PHP](https://be1st.ai/technologies/framework/php): 3.0% (502)
7. [Lit](https://be1st.ai/technologies/framework/lit): 2.9% (487)
8. [Astro](https://be1st.ai/technologies/framework/astro): 2.4% (405)
9. [Vue.js](https://be1st.ai/technologies/framework/vue-js): 2.2% (373)
10. [Alpine.js](https://be1st.ai/technologies/framework/alpine-js): 2.0% (341)

The number for React counts only websites where Tech Stack detects it directly, not websites built with Next.js, Gatsby, and Remix, which run it too. The number for Vue.js counts only websites where Tech Stack detects it directly, not websites built with Nuxt, which run it too.

## Astro versions found in audits

Tech Stack has found 52 different Astro versions in audits so far. A version stays on this list even after the website that ran it has updated. Our daily version check compares each one with the official release data and with OSV.dev.

- 0 on the latest version
- 7 outdated
- 45 with known vulnerabilities

Every version in the table other than the latest should be updated to 7.4.7.

| Version | Status | Known vulnerabilities |
| --- | --- | --- |
| 7.4.6 | Outdated | 0 |
| 7.4.4 | Outdated | 0 |
| 7.4.2 | Outdated | 0 |
| 7.4.1 | Outdated | 0 |
| 7.3.6 | Outdated | 0 |
| 7.3.5 | Outdated | 0 |
| 7.3.3 | Outdated | 0 |
| 7.3.2 | Vulnerable | 1 vulnerability, highest low (GHSA-mpr7-6m5w-76rw) |
| 7.3.1 | Vulnerable | 2 vulnerabilities, highest moderate (GHSA-98hj-9722-w3j8, GHSA-mpr7-6m5w-76rw) |
| 7.2.10 | Vulnerable | 2 vulnerabilities, highest moderate (GHSA-98hj-9722-w3j8, GHSA-mpr7-6m5w-76rw) |
| 7.2.2 | Vulnerable | 4 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-376h-93r7-7g6f, GHSA-98hj-9722-w3j8, ...) |
| 7.2.0 | Vulnerable | 4 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-376h-93r7-7g6f, GHSA-98hj-9722-w3j8, ...) |
| 7.1.6 | Vulnerable | 4 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-376h-93r7-7g6f, GHSA-98hj-9722-w3j8, ...) |
| 7.1.5 | Vulnerable | 4 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-376h-93r7-7g6f, GHSA-98hj-9722-w3j8, ...) |
| 7.0.9 | Vulnerable | 4 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-376h-93r7-7g6f, GHSA-4g3v-8h47-v7g6, ...) |
| 7.0.6 | Vulnerable | 4 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-376h-93r7-7g6f, GHSA-4g3v-8h47-v7g6, ...) |
| 7.0.3 | Vulnerable | 7 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-376h-93r7-7g6f, GHSA-4g3v-8h47-v7g6, ...) |
| 6.4.8 | Vulnerable | 6 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-376h-93r7-7g6f, GHSA-4g3v-8h47-v7g6, ...) |
| 6.4.6 | Vulnerable | 6 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-376h-93r7-7g6f, GHSA-4g3v-8h47-v7g6, ...) |
| 6.4.5 | Vulnerable | 8 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-376h-93r7-7g6f, ...) |
| 6.4.4 | Vulnerable | 8 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-376h-93r7-7g6f, ...) |
| 6.4.3 | Vulnerable | 8 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-376h-93r7-7g6f, ...) |
| 6.4.2 | Vulnerable | 8 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-376h-93r7-7g6f, ...) |
| 6.3.7 | Vulnerable | 8 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-376h-93r7-7g6f, ...) |
| 6.3.6 | Vulnerable | 8 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-376h-93r7-7g6f, ...) |
| 6.3.5 | Vulnerable | 8 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-376h-93r7-7g6f, ...) |
| 6.2.1 | Vulnerable | 9 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 6.1.9 | Vulnerable | 10 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 6.1.7 | Vulnerable | 10 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 6.1.0 | Vulnerable | 11 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 6.0.8 | Vulnerable | 11 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 6.0.5 | Vulnerable | 11 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 6.0.4 | Vulnerable | 11 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 6.0.1 | Vulnerable | 11 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.18.2 | Vulnerable | 11 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.18.1 | Vulnerable | 11 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.18.0 | Vulnerable | 12 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.17.3 | Vulnerable | 12 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.17.2 | Vulnerable | 12 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.17.1 | Vulnerable | 12 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.16.9 | Vulnerable | 12 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.16.8 | Vulnerable | 12 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.16.6 | Vulnerable | 12 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.16.4 | Vulnerable | 12 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.16.0 | Vulnerable | 12 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.14.3 | Vulnerable | 18 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.13.9 | Vulnerable | 21 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 5.13.7 | Vulnerable | 21 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 4.16.19 | Vulnerable | 19 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-8hv8-536x-4wqp, ...) |
| 4.15.3 | Vulnerable | 23 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-49w6-73cw-chjr, ...) |
| 4.4.4 | Vulnerable | 23 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-49w6-73cw-chjr, ...) |
| 3.6.0 | Vulnerable | 22 vulnerabilities, highest critical (GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-49w6-73cw-chjr, ...) |

Vulnerabilities from OSV.dev, checked 8 Nov 2026.

## Astro versions and release history

8 release lines since 2021, as listed by the npm registry. The latest version is 7.4.7, released 5 Nov 2026.

| Version | Released | Latest release | Releases |
| --- | --- | --- | --- |
| 7 | 22 Jun 2026 | 7.4.7 (5 Nov 2026) | 45 |
| 6 | 10 Mar 2026 | 6.4.8 (17 Jun 2026) | 41 |
| 5 | 3 Dec 2024 | 5.18.2 (26 May 2026) | 137 |
| 4 | 5 Dec 2023 | 4.16.19 (19 Aug 2025) | 145 |
| 3 | 30 Aug 2023 | 3.6.5 (1 Mar 2024) | 48 |
| 2 | 24 Jan 2023 | 2.10.15 (29 Aug 2023) | 93 |
| 1 | 9 Aug 2022 | 1.9.2 (11 Jan 2023) | 65 |
| 0.x (before 1.0) | 13 Mar 2021 | 0.26.1 (4 Apr 2022) | 139 |

Sources: [npm registry, package astro](https://www.npmjs.com/package/astro), checked 8 Nov 2026.

## Other technologies in JS/CSS Frameworks

- [TanStack Start](https://be1st.ai/technologies/framework/tanstack-start): 1.9% of websites
- [Nette](https://be1st.ai/technologies/framework/nette): 1.8% of websites
- [Nuxt](https://be1st.ai/technologies/framework/nuxt): 1.5% of websites
- [Angular](https://be1st.ai/technologies/framework/angular): 1.2% of websites
- [Preact](https://be1st.ai/technologies/framework/preact): 1.2% of websites
- [UnoCSS](https://be1st.ai/technologies/framework/unocss): 1.2% of websites
- [Express](https://be1st.ai/technologies/framework/express): 1.1% of websites
- [SvelteKit](https://be1st.ai/technologies/framework/sveltekit): 1.1% of websites
- [ASP.NET](https://be1st.ai/technologies/framework/asp-net): 1.0% of websites
- [Django](https://be1st.ai/technologies/framework/django): <1% of websites
- [HTMX](https://be1st.ai/technologies/framework/htmx): <1% of websites
- [Turbo (Hotwire)](https://be1st.ai/technologies/framework/turbo): <1% of websites

[All 38 in JS/CSS Frameworks](https://be1st.ai/technologies/framework)

## Questions about Astro

### What is Astro?

A web framework focused on content-driven websites with minimal client-side JavaScript. It supports the islands architecture and integration with React, Vue, Svelte, and more. Ideal for blogs, documentation, and marketing sites. The be1st catalog lists Astro under JS/CSS Frameworks. License of Astro: MIT.

### What is the latest version of Astro?

The latest version of Astro is 7.4.7, released 5 Nov 2026 (source: npm registry, package astro).

### How many websites use Astro?

405 of the 16,845 websites audited by be1st run Astro (2.4%), as of 8 Nov 2026.

### When was Astro first released?

Astro was first released in 2021.

### Is Astro still a modern choice?

Yes. Astro counts as a modern technology. Actively developed, Astro 7 released in 2026.

### What are the alternatives to Astro?

Technologies that do the same job as Astro include Next.js, Nuxt, SvelteKit, and Gatsby.

Numbers: latest audit of each of 16,845 websites audited by be1st, as of 8 Nov 2026.
