Built by 
About this software
About FreshBasket – Grocery E-commerce Platform
Live demo: open the live demo and use the one-click Admin demo, Customer or Rider buttons on the login page (no password needed). Order as the customer, assign the order to the Demo Rider as the admin, then mark it delivered as the rider. The demo can't change real data and masks real customers' details.
Why FreshBasket – Grocery E-commerce Platform
What makes it better
than the alternatives
- 01
Three payment routes
Cash on delivery, wallet credit (COD orders only) and SSLCommerz online payment verified server-side through its validation API.
- 02
AI search and recipes
Gemini-powered smart search (English, Banglish, Bangla) and cart-based recipe suggestions, with keyword and curated fallbacks when no API key is set.
- 03
Server-side pricing and atomic stock
Prices are recomputed on the server, and stock, coupon and wallet changes use conditional atomic updates with rollback on failure.
- 04
Role checks against the database
Every protected API calls requireRole(), reading the role from MongoDB so demotions take effect immediately; login and code flows are rate-limited.
- 05
Deployment-ready package
Includes a Dockerfile (non-root, standalone), docker-compose with optional MongoDB, env template, setup and deployment guides, and demo-data seeding.
Live demo & quality
- optional DEMO_MODE with one-click
Admin/Customer/Riderlogins and a product landing page; demo orders never touch real stock - coupons or wallets; customer data masked; unit tests (npm test) and an API smoke test (npm run test:demo).
| Language | Version | Framework | Used for | Share of code |
|---|---|---|---|---|
| TypeScript (React) | — | — | Front-end | 68.4% |
| TypeScript | — | — | Front-end | 29.2% |
| JavaScript | — | — | Front-end | 1.4% |
| CSS | — | — | Styling | 1% |
- Primary language
- TypeScript 5 on Node.js 20.9+
- Framework
- Next.js 16 (App Router), React 19
- Database
- MongoDB via Mongoose 9 (server version not stated in the code)
- Authentication
- NextAuth 4: email + password credentials with JWT sessions, optional Google sign-in, 6-digit email verification codes
- Licence
- Single-site
- Screens
- 31
- Database tables
- 10
- Supported languages
- Admin and storefront UI in English; AI search accepts English, Banglish and Bangla input; Bangla product names are slugified. Not an RTL layout.
- Browser support
- Modern evergreen browsers (Next.js 16 defaults); no tested browser list in the digest
| Minimum | Recommended | |
|---|---|---|
| CPU | 1 vCPU | 2 vCPU |
| RAM | 1 GB RAM | 2 GB RAM |
| OS | Linux; Node.js 22 LTS (20.9+ works); Docker optional | Linux; Node.js 22 LTS (20.9+ works); Docker optional |
| Est. monthly hosting | $25 | $25 |
``` docker build -t freshbasket --build-arg NEXT_PUBLIC_BASE_URL=https://shop.example.com . docker compose up -d --build docker compose run --rm app node database/indexes.js docker compose run --rm app node database/seed.js --demo-users ``` Set MONGODB_URI and the other secrets in .env.production first. The app listens on 127.0.0.1:3000, so put a TLS reverse proxy in front of it.
``` npm ci npm run build npm run db:setup npm start ``` Run with environment variables from .env.local or your host settings, and terminate TLS with Caddy or nginx (see docs/DEPLOYMENT.md).
Quality report
Manually reviewedHow to read the quality report
What this is. Every project on Vibe96 goes through an automated audit of its source code before a reviewer in Dubai checks it by hand. The score is out of 100; 75 is the minimum to be listed, and any single failing check blocks a listing regardless of the score.
- Security
- No real credentials in the code, every data-changing route protected, admin areas role-gated, no SQL built from user input.
- Code structure
- A developer can navigate and extend it: clear module boundaries, no giant files, little copy-paste.
- Docs & completeness
- The setup guide, example config, schema and required files the builder committed to are actually in the archive.
- Dependency health
- Packages pinned, no known critical vulnerabilities, no abandoned libraries in production paths.
- Build & deploy
- A clean machine can restore, build and start it by following the shipped instructions.
Warnings are problems that didn't block the listing; they stay visible here until a later version clears them. The audit reads the code — it does not run it — so always try the live demo before you buy. Lines of code are counted from the same audited archive.
Reviewer notes (4 minor)
Small improvements the developer has been told about. None of them stop the software from working.
Versions & updates
No updates yet. New versions appear here with a changelog.
Buyers receive updates free for 1 year.
What you get
- </>Full source codeThe complete audited source, delivered as a download from your account. No obfuscation.
- ▤DocumentationSetup guide, architecture notes, CLAUDE.md and AGENTS.md.
- ↻One year of updatesEvery new version the builder publishes, free for 12 months.
- ♧30 days of supportInstallation and defect support through Vibe96 tickets.
