npmpackage.info

Gathering detailed insights and metrics for express

Other packages similar to express

Express

3.0.1

This package was published as a result of a bug, please use the [express](https://www.npmjs.com/package/express) package instead.

@types/express

5.0.3

TypeScript definitions for express

@types/express-serve-static-core

5.0.6

TypeScript definitions for express-serve-static-core

conventional-changelog-express

5.0.0

Express preset for conventional-changelog.

Gathering detailed insights and metrics for express

express

Fast, unopinionated, minimalist web framework for node.

5.1.0

67,142

MIT

JavaScript

225.37 kB

5,307,703,126 8.8

Installations

npm install express

Developer Guide

BETA

Typescript

No

Module System

N/A

Min. Node Version

>= 18

Node Version

23.5.0

NPM Version

10.9.2 Score

Supply Chain

98.7

Quality

84.1

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

87

Total

1,978

Closed

1,446

Merged

445

Issues

Open

102

Total

3,972

Closed

3,870

Releases

160

5.0.1

v5.0.1

Updated on Oct 08, 2024

v5.1.0

Updated on Mar 31, 2025

4.21.2

Updated on Dec 05, 2024

4.21.1

Updated on Oct 08, 2024

4.21.0

Updated on Sep 11, 2024

5.0.0

v5.0.0

Updated on Sep 10, 2024

View All 160 releases

Languages

JavaScript

Makefile

Shell

JavaScript (99.89%)

Makefile (0.07%)

Shell (0.05%)

Developer

expressjs

Download Statistics

Total Downloads

5,307,703,126

Last Day

2,441,750

Last Week

40,125,102

Last Month

177,432,608

Last Year

1,729,385,328

GitHub Statistics

MIT License

67,142 Stars

6,063 Commits

18,890 Forks

1,693 Watchers

13 Branches

339 Contributors

Updated on Jun 11, 2025

Bundle Size

568.44 kB

Minified

225.37 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://opencollective.com/express

Maintainers

View All 339 Contributors

Package Meta Information

Latest Version

5.1.0

Package Id

express@5.1.0

Unpacked Size

192.40 kB

Size

50.89 kB

File Count

NPM Version

10.9.2

Node Version

23.5.0

Published on

Mar 31, 2025

Total Downloads

Cumulative downloads

Total Downloads

5,307,703,126

Last Day

-2.5%

2,441,750

Compared to previous day

Last Week

-7.5%

40,125,102

Compared to previous week

Last Month

10.7%

177,432,608

Compared to previous month

Last Year

18.3%

1,729,385,328

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Fast, unopinionated, minimalist web framework for Node.js.

This project has a Code of Conduct.

Installation
Features
Docs & Community
Quick Start
Running Tests
Philosophy
Examples
Contributing to Express
TC (Technical Committee)
Triagers
License

1import express from 'express'
2
3const app = express()
4
5app.get('/', (req, res) => {
6  res.send('Hello World')
7})
8
9app.listen(3000)

Installation

This is a Node.js module available through the npm registry.

Before installing, download and install Node.js. Node.js 18 or higher is required.

If this is a brand new project, make sure to create a package.json first with the npm init command.

Installation is done using the npm install command:

1npm install express

Follow our installing guide for more information.

Features

Robust routing
Focus on high performance
Super-high test coverage
HTTP helpers (redirection, caching, etc)
View system supporting 14+ template engines
Content negotiation
Executable for generating applications quickly

Docs & Community

Website and Documentation - [website repo]
GitHub Organization for Official Middleware & Modules
Github Discussions for discussion on the development and usage of Express

PROTIP Be sure to read the migration guide to v5

Quick Start

The quickest way to get started with express is to utilize the executable express(1) to generate an application as shown below:

Install the executable. The executable's major version will match Express's:

1npm install -g express-generator@4

Create the app:

1express /tmp/foo && cd /tmp/foo

Install dependencies:

1npm install

Start the server:

1npm start

View the website at: http://localhost:3000

Philosophy

The Express philosophy is to provide small, robust tooling for HTTP servers, making it a great solution for single page applications, websites, hybrids, or public HTTP APIs.

Express does not force you to use any specific ORM or template engine. With support for over 14 template engines via @ladjs/consolidate, you can quickly craft your perfect framework.

Examples

To view the examples, clone the Express repository:

1git clone https://github.com/expressjs/express.git --depth 1 && cd express

Then install the dependencies:

1npm install

Then run whichever example you want:

1node examples/content-negotiation

Contributing

The Express.js project welcomes all constructive contributions. Contributions take many forms, from code for bug fixes and enhancements, to additions and fixes to documentation, additional tests, triaging incoming pull requests and issues, and more!

See the Contributing Guide for more technical details on contributing.

Security Issues

If you discover a security vulnerability in Express, please see Security Policies and Procedures.

Running Tests

To run the test suite, first install the dependencies:

1npm install

Then run npm test:

1npm test

People

The original author of Express is TJ Holowaychuk

List of all contributors

TC (Technical Committee)

UlisesGascon - Ulises Gascón (he/him)
jonchurch - Jon Church
wesleytodd - Wes Todd
LinusU - Linus Unnebäck
blakeembrey - Blake Embrey
sheplu - Jean Burellier
crandmck - Rand McKinney
ctcpip - Chris de Almeida

TC emeriti members

dougwilson - Douglas Wilson
hacksparrow - Hage Yaapa
jonathanong - jongleberry
niftylettuce - niftylettuce
troygoode - Troy Goode

Triagers

aravindvnair99 - Aravind Nair
bjohansebas - Sebastian Beltran
carpasse - Carlos Serrano
CBID2 - Christine Belzie
dpopp07 - Dustin Popp
UlisesGascon - Ulises Gascón (he/him)
3imed-jaberi - Imed Jaberi
IamLizu - S M Mahmudul Hasan (he/him)
Phillip9587 - Phillip Barta
Sushmeet - Sushmeet Sunger
rxmarbles Rick Markins (He/him)

Triagers emeriti members

Emeritus Triagers

AuggieH - Auggie Hudak
G-Rath - Gareth Jones
MohammadXroid - Mohammad Ayashi
NawafSwe - Nawaf Alsharqi
NotMoni - Moni
VigneshMurugan - Vignesh Murugan
davidmashe - David Ashe
digitaIfabric - David
e-l-i-s-e - Elise Bonner
fed135 - Frederic Charette
firmanJS - Firman Abdul Hakim
getspooky - Yasser Ameur
ghinks - Glenn
ghousemohamed - Ghouse Mohamed
gireeshpunathil - Gireesh Punathil
jake32321 - Jake Reed
jonchurch - Jon Church
lekanikotun - Troy Goode
marsonya - Lekan Ikotun
mastermatt - Matt R. Wilson
maxakuru - Max Edell
mlrawlings - Michael Rawlings
rodion-arr - Rodion Abdurakhimov
sheplu - Jean Burellier
tarunyadav1 - Tarun yadav
tunniclm - Mike Tunnicliffe
enyoghasim - David Enyoghasim
0ss - Salah
import-brain - Eric Cheng (he/him)
dakshkhetan - Daksh Khetan (he/him)
lucasraziel - Lucas Soares Do Rego
mertcanaltin - Mert Can Altin

License

MIT

Moderate

4/10

Summary

Express ressource injection

Affected Versions

<= 3.21.4

Patched Versions

4.0.0-rc1

Moderate

6.1/10

Summary

Express.js Open Redirect in malformed URLs

Affected Versions

>= 5.0.0-alpha.1, < 5.0.0-beta.3

Patched Versions

5.0.0-beta.3

Moderate

6.1/10

Summary

Express.js Open Redirect in malformed URLs

Affected Versions

< 4.19.2

Patched Versions

4.19.2

Moderate

6.1/10

Summary

No Charset in Content-Type Header in express

Affected Versions

>= 4.0.0, < 4.5.0

Patched Versions

4.5.0

Moderate

6.1/10

Summary

No Charset in Content-Type Header in express

Affected Versions

< 3.11.0

Patched Versions

3.11.0

Low

4.7/10

Summary

Express Open Redirect vulnerability

Affected Versions

>= 3.4.5, < 4.0.0-rc1

Patched Versions

4.0.0-rc1

Low

5/10

Summary

express vulnerable to XSS via response.redirect()

Affected Versions

>= 5.0.0-alpha.1, < 5.0.0

Patched Versions

5.0.0

Low

5/10

Summary

express vulnerable to XSS via response.redirect()

Affected Versions

< 4.20.0

Patched Versions

4.20.0

10

Dependency-Update-Tool

Determines if the project uses a dependency update tool.

10

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Security-Policy

Determines if the project has published a security policy.

10

Maintained

Determines if the project is "actively maintained".

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

10

Contributors

Determines if the project has a set of contributors from multiple organizations (e.g., companies).

9

SAST

Determines if the project uses static code analysis.

9

CI-Tests

Determines if the project runs tests before pull requests are merged.

6

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

Score

8.8

/10

Last Scanned on 2025-06-09T21:24:42Z

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

express - 5.1.0 | npmpackage.info

Other packages similar to express

Other packages similar to express

express

Installations

Developer Guide

No

N/A

>= 18

23.5.0

10.9.2

Score

Pull Requests

87

1,978

1,446

445

Issues

102

3,972

3,870

Releases

Languages

Developer

Download Statistics

GitHub Statistics

Bundle Size

568.44 kB

225.37 kB

Sponsor this package

Maintainers

Package Meta Information

Total Downloads

5,307,703,126

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

Table of contents

Installation

Features

Docs & Community

Quick Start

Philosophy

Examples

Contributing

Security Issues

Running Tests

People

TC (Technical Committee)

TC emeriti members

Triagers

Emeritus Triagers

License

10

10

10

10

10

10

10

10

10

10

9

9

6

0

0

8.8

/10