Gathering detailed insights and metrics for hono
Gathering detailed insights and metrics for hono
Installations
npm install honoDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Min. Node Version
>=16.9.0
Node Version
22.12.0
NPM Version
11.2.0
Score
99.5
Supply Chain
98.3
Quality
93
Maintenance
100
Vulnerability
100
License
Releases
352
Languages
4
TypeScript
JavaScript
Dockerfile
HTML
TypeScript (99.5%)
JavaScript (0.48%)
Dockerfile (0.01%)
Developer
Download Statistics
Total Downloads
30,908,876
Last Day
66,413
Last Week
960,210
Last Month
3,935,704
Last Year
25,939,433
GitHub Statistics
MIT License
24,619 Stars
2,283 Commits
730 Forks
74 Watchers
27 Branches
238 Contributors
Updated on Jun 14, 2025
Bundle Size
17.32 kB
Minified
6.71 kB
Minified + Gzipped
Maintainers
1
Package Meta Information
Latest Version
4.7.11
Package Id
hono@4.7.11
Unpacked Size
1.08 MB
Size
181.36 kB
File Count
529
NPM Version
11.2.0
Node Version
22.12.0
Published on
May 31, 2025
Total Downloads
Cumulative downloads
Total Downloads
30,908,876
Last Day
17.7%
66,413
Compared to previous day
Last Week
0.3%
960,210
Compared to previous week
Last Month
15.7%
3,935,704
Compared to previous month
Last Year
469.7%
25,939,433
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Documentation 👉 hono.dev
Now supports JSR and deno.land/x is deprecated! See Migration guide.
Hono - means flame🔥 in Japanese - is a small, simple, and ultrafast web framework built on Web Standards. It works on any JavaScript runtime: Cloudflare Workers, Fastly Compute, Deno, Bun, Vercel, AWS Lambda, Lambda@Edge, and Node.js.
Fast, but not only fast.
1import { Hono } from 'hono' 2const app = new Hono() 3 4app.get('/', (c) => c.text('Hono!')) 5 6export default app
Quick Start
1npm create hono@latest
Features
- Ultrafast 🚀 - The router
RegExpRouteris really fast. Not using linear loops. Fast. - Lightweight 🪶 - The
hono/tinypreset is under 12kB. Hono has zero dependencies and uses only the Web Standard API. - Multi-runtime 🌍 - Works on Cloudflare Workers, Fastly Compute, Deno, Bun, AWS Lambda, Lambda@Edge, or Node.js. The same code runs on all platforms.
- Batteries Included 🔋 - Hono has built-in middleware, custom middleware, and third-party middleware. Batteries included.
- Delightful DX 😃 - Super clean APIs. First-class TypeScript support. Now, we've got "Types".
Documentation
The documentation is available on hono.dev.
Migration
The migration guide is available on docs/MIGRATION.md.
Communication
X and Discord channel are available.
Contributing
Contributions Welcome! You can contribute in the following ways.
- Create an Issue - Propose a new feature. Report a bug.
- Pull Request - Fix a bug and typo. Refactor the code.
- Create third-party middleware - Instruct below.
- Share - Share your thoughts on the Blog, X, and others.
- Make your application - Please try to use Hono.
For more details, see docs/CONTRIBUTING.md.
Contributors
Thanks to all contributors!
Authors
Yusuke Wada https://github.com/yusukebe
RegExpRouter, SmartRouter, LinearRouter, and PatternRouter are created by Taku Amano https://github.com/usualoma
License
Distributed under the MIT License. See LICENSE for more information.
Moderate
5.9/10
Summary
Hono allows bypass of CSRF Middleware by a request without Content-Type header.
Affected Versions
< 4.6.5
Patched Versions
4.6.5
Moderate
5.3/10
Summary
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
Affected Versions
< 4.2.7
Patched Versions
4.2.7
Moderate
4.2/10
Summary
Named path parameters can be overridden in TrieRouter
Affected Versions
< 3.11.7
Patched Versions
3.11.7
Low
5/10
Summary
Hono CSRF middleware can be bypassed using crafted Content-Type header
Affected Versions
< 4.5.8
Patched Versions
4.5.8
No security vulnerabilities found.