SnackBase
Open-source, GxP-compliant back end for Python teams
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
Hi HN, I’m the creator of SnackBase.I built this because I work in Healthcare and Life Sciences domain and was tired of spending months building the same "compliant" infrastructure (Audit Logs, Row-Level Security, PII Masking, Auth) before writing any actual product code.The Problem: Existing BaaS tools (Supabase, Appwrite) are amazing, but they are hard to validate for GxP (FDA regulations) and often force you into a JS/Go ecosystem. I wanted something native to the Python tools I already use.The Solution: SnackBase is a self-hosted Python (FastAPI + SQLAlchemy) backend that includes:Compliance Core: Immutable audit logs with blockchain-style hashing (prev_hash) for integrity.Native Python Hooks: You can write business logic in pure Python (no webhooks or JS runtimes required).Clean Architecture: Strict separation of layers. No business logic in the API routes.The Stack:Python 3.12 + FastAPISQLAlchemy 2.0 (Async)React 19 (Admin UI)Links:Live Demo: https://demo.snackbase.devRepo: https://github.com/lalitgehani/snackbaseThe demo resets every hour. I’d love feedback on the DSL implementation or the audit logging approach.
HN · launched Jan 13, 2026 · 70 upvotes (top 15%) · 0 views
Niche: backend development platforms and services · 94 launches, 6 in the last 7 days · Explore this niche →
Category and tags
- Healthcare
- Data infrastructure
- Developer
- Not AI
- Hobby / open-source project
Visit website ↗ Source listing ↗
More like this: all 94 launches in backend development platforms and services →
Could you build this?
Partial The BaaS backend and Postgres wrappers are easy to vibe-code, but true GxP compliance requires specialized regulatory validation, 21 CFR Part 11 electronic signature rules, and formal audit standards.
What it would actually take: Built on Python (FastAPI), PostgreSQL with Row-Level Security, and cryptographic audit log chains. The difficult component is meeting strict FDA 21 CFR Part 11 requirements, including immutable append-only logs, verified digital signatures, time-drift controls, and producing automated GAMP 5 qualification validation packages.
Discussion
14 comments analyzed.
Competitors mentioned: Keybase (audit log approaches), Supabase, PocketBase, Django, Rails
Concerns raised: AGPL license may restrict commercial self-hosting use, Custom hooks/schemas licensing ambiguity with in-process execution, Database performance impact of immutable hash-chain audit logs, Custom DSL maintenance burden (700+ lines of lexer/parser/evaluator), Postgres support still experimental, not production-ready
Feature requests: Explicit linking exception to exempt user-defined hooks from AGPL, Postgres as first-class default instead of SQLite in quick start, Native read/write splitting for database scaling architectures, Clearer upfront documentation on database support status
Competitors
Other products that read as similar to this one : 43 launches clear the similarity bar, closest 8 shown.
Attention rank: #6 of 44 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 75 days after the earliest competitor.
- Capbase · ph · 2026-10-23 · 2 upvotes · similarity 0.36
- Nuvix · hn · 2025-10-30 · 5 upvotes · similarity 0.35
- Pyra · hn · 2026-04-17 · 13 upvotes · similarity 0.35
- NodusDB · ph · 2026-11-12 · 2 upvotes · similarity 0.35
- GitHub · ph · 2026-10-15 · 1 upvotes · similarity 0.34
- GEDB · hn · 2026-02-16 · 9 upvotes · similarity 0.34
- BustAPI · hn · 2025-12-21 · 5 upvotes · similarity 0.34
- Prefab · hn · 2026-04-08 · 5 upvotes · similarity 0.34
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.