Open Source JavaScript Headless CMS

Ghost is a popular open source headless Node.js CMS for professional online publishing. Ghost allows writers, podcasters and other online content creators to quickly and easily set up their own sites, publish content on their own terms and deliver newsletters online. Ghost is a powerful platform that gives you complete control over design, content, delivery, experience and more. It’s got built-in SEO features, email newsletters, and works with hundreds of tools that can help speed up your workflow. It’s also great for entrepreneurs as it has the ability to create sustainable membership businesses.

Strapi is the most advanced open-source headless CMS for creating powerful and customizable APIs with no effort. Built with 100% JavaScript, Strapi lets you easily create self-hosted, customizable, and performant content APIs. Strapi projects can be hosted on any platform of your choice, and you can work with any database you prefer. All your favorite dev tools-- from static site generators and databases to hosting platforms work with Strapi, so you're never locked in. Strapi is designed to be developer-first, with powerful features that allow you to create a flexible data structure in just minutes. Strapi also makes it easy for editors to manage their content and distribute it anywhere. With Strapi, you always have full control of your data.

Open source headless CMS API written using NestJS, that has pre built modules like User Management, Role Management, Permission Management, Email Module, Account Settings, OTP, Throttling, RBAC support, Localization, and many more.

The Ediacaran application is designed using a modular architecture approach, meaning it is built as a collection of smaller, self-contained components (modules). Each module represents a distinct domain of the system and can evolve independently without disrupting the whole application. The modular structure of the Ediacaran application allows fine-grained control over how each module accesses data, external connections, and execution resources. For example, the storage module can enforce strict access rules so that only authorized modules (like processing) can read or write data, while external-facing modules (like ingestion or visualization) have limited permissions. This reduces the attack surface, helps prevent unauthorized access, and enables better enforcement of security policies such as authentication, authorization, and data isolation.