HTTP servers and web frameworks

12-month change compares the average of the last 4 weeks of downloads with the first 4 weeks of the 52-week series. Gzip size is for the whole package, as measured by Bundlephobia. "-" means the value has not been fetched.

• koa-webpack-dev-middlewarewebpack dev middleware for koa
• @nodearch/expressnodearch express server
• express-requests-loggerMiddleware for logging request/responses in Express apps
• domain-contextGlobally accessible domain-bound contexts
• light-serveran http server that can watch files, trigger commands and livereload
• koa-ejsejs render middleware for koa
• koa-cache-controlMiddleware for meddling with Cache-Control headers
• pure-httpThe simple web framework for Node.js with zero dependencies.
• heroku-ssl-redirectRedirect users to the SSL version of your app. For ExpressJS running on Heroku
• @salesforce/mrt-utilitiesMiddleware and utilities to simulate a deployed Managed Runtime environment
• express-zod-validationsExpress middleware to validate request (headers, params, query, body) using Zod
• express-lazy-routerLazy loading for express router
• koa-generic-sessionkoa generic session store by memory, redis or others
• koa-joi-routerConfigurable, input validated routing for koa.
• @tryghost/brute-knexA Knex.js store for express-brute
• co-requestco-request promisify wrapper for request
• express-subdomainSimple and lightweight middleware to handle subdomains
• express-expeditiousexpress caching middlware
• express-query-parserA parser helps you parse request for your express server
• koa-session2Middleware for Koa2 to get/set session use with custom stores such as Redis or mongodb
• purifyValidator functions for many types of input, intended for use with express
• @postman/postman-mcp-serverPostman MCP Server — connect AI agents (Claude Code, Cursor, VS Code Copilot, Gemini CLI) to your Postman collections, specifications, and environments via Model Context Protocol (MCP)
• middleware-handlerManager for custom middlewares
• @grpc-web/middlewaregRPC Web middleware for Express and Connect.
• express-socket.io-sessionShare a cookie-based express-session middleware with socket.io
• @tsed/platform-httpA TypeScript Framework on top of Express
• oauth2orize-koaOAuth 2.0 authorization server toolkit for Node.js.
• express-response-middlewareTransform an express response
• ultimate-expressThe Ultimate Express. Fastest http server with full Express compatibility, based on uWebSockets.
• express-sitemap-xmlExpress middleware to serve `sitemap.xml` from a list of URLs
• xtplnodejs wrapper around xtemplate engine
• host-validationNode.js middleware to validate Host and Referer headers in HTTP requests and protect against DNS rebinding attacks.
• koa2-connectUse Connect/Express middleware in Koa2
• restanaSuper fast and minimalist web framework for building REST micro-services.
• koa-bunyan-loggerKoa middleware for logging requests using bunyan
• passport-josePassport JWT strategy with EdDSA, ES256 and modern cryptographic algorithm support via JOSE
• express-domain-middlewarewrap express request/response with node domains
• expresAdd express compatible methods to your response object
• response-streampass http server response methods through to the next destination pipe
• express-openapi-validateExpress middleware to validate request based on an OpenAPI 3 document
• lum_request-statsGet stats on your Node.js HTTP server requests
• @sailshq/connect-redisRedis session store for your Sails app.
• angular2Angular 2 - a web framework for modern web apps
• alemmiFast, unopinionated, minimalist web framework
• pompelmiClamAV for humans — scan any file and get back Clean, Malicious, or ScanError. No daemons. No cloud. No native bindings.
• koa-rewrite-75lbURL rewrite middleware for koa
• sectxtA Node.js Security.txt implementation
• @flmngr/flmngr-server-node-nest-expressInclude Flmngr file manager server-side into your Nest (Express-based) website or app
• @outlinewiki/koa-passportPassport middleware for Koa
• koa-rewriteURL rewrite middleware for koa

• express-rate-limit vs rate-limiter-flexible
• superstruct vs express-validator
• @codegenie/serverless-express vs serverless-http
• morgan vs koa-logger