Zero-dependency backend framework for Node.js

Zero Dependencies

Built entirely on Node.js core — no node_modules needed. ORM database drivers are the only optional extras.

ORM & Database

LINQ-style query builder, schema DDL, migrations, and 7 adapters — SQLite, MySQL, PostgreSQL, MongoDB, Redis, Memory, and JSON.

Modular Router

Sub-apps, groups, chaining, param handlers, and route introspection.

Security Suite

Helmet headers, CSRF protection, signed cookies, and timeout guards.

Body Parsers

Built-in json(), urlencoded(), text(), raw(), and multipart().

CORS

Cross-origin resource sharing with preflight and origin control.

Real-time

WebSocket rooms, broadcasting, and sub-protocols. SSE with auto-IDs and keep-alive.

HTTP/2 & TLS

Native HTTP/2, HTTPS, and mutual TLS with automatic HTTP/1.1 fallback.

HTTP Client

Built-in fetch with mTLS, progress callbacks, and abort support.

Auth & Sessions

JWT signing and verification, OAuth flows, cookie sessions, and role-based route guards.

Rate Limiting

Per-IP request throttling with configurable windows and limits.

Validation

Schema-based request validation with type coercion and custom rules.

Compression

Brotli, gzip, and deflate with threshold and content filtering.

Static Files

MIME detection, ETag caching, HTTP/2 push, and directory index support.

Streaming Uploads

Multipart file streaming to disk with size limits and progress.

Logging

Request logger with response timing, colorized output, and custom formats.

Error Handling

16+ typed HTTP error classes with structured details and global handlers.

Query Caching

In-memory LRU cache with TTL for hot queries and automatic invalidation on writes.

Read Replicas

Load-balanced read scaling with automatic primary/replica routing and health monitoring.

Full-Text & Geo Search

Built-in full-text indexing and geospatial queries with radius, bounding box, and nearest-neighbor support.

Multi-Tenancy

Isolated tenant data with automatic scoping, migration, and per-tenant configuration.

Audit Logging

Automatic change tracking for every create, update, and delete with diff snapshots and user attribution.

Database Seeding

Factory-based seed data generation with bulk inserts, environment-aware profiles, and rollback support.

CLI & Scaffolding

Migration runner, model and seeder generators, and database commands.

Observability

Prometheus metrics, W3C distributed tracing, structured logging, and health-check probes.

Lifecycle Hooks

Graceful startup and shutdown with dependency-ordered teardown, signal handling, and drain support.

Clustering

Multi-process workers with auto-respawn, backoff, and graceful shutdown.

Environment Config

Multi-environment .env loading with variable interpolation and type coercion.

TypeScript

Full type definitions for every API, middleware, ORM model, and plugin.

Playground

Interactive tools to test uploads, body parsers, and the built-in proxy.

Clone the repo to explore this playground with full source code, routes, and controller examples.
git clone https://github.com/tonywied17/zero-http.git && cd zero-http && npm i better-sqlite3 && npm run docs

File Uploads

Multipart streaming with progress, thumbnails & trash management
Drop files here or Supports any file type
Server Response
1 / 1

Files

Trash

Quick parser tests

Test each built-in body parser by sending data directly to the server.
JSON application/json

Parses JSON request bodies via json(). Supports size limits, strict mode, gzip decompression, verify callbacks, and req.rawBody for signature verification.

URL-Encoded application/x-www-form-urlencoded

Parses form submissions via urlencoded(). Supports nested objects, parameterLimit, depth limits, and verify callbacks.

Plain Text text/plain

Parses raw text bodies via text(). Auto-detects charset, supports verify callbacks and gzip decompression.


				

Proxy Test

Fetch any external URL through the built-in server proxy.

				

WebSocket Chat

Connect to the built-in WebSocket server and send messages in real time.

SSE Event Viewer

Subscribe to the Server-Sent Events endpoint and view incoming events live. Use the broadcast form to push a custom event to all subscribers.
Disconnected

ORM Task Manager

Full CRUD with the built-in ORM — in-memory Task model with search, filters, scopes, soft-delete & restore.

				

Blog Explorer — Advanced ORM Showcase

Multi-model demo: Authors & Posts with relationships, scopes, pagination, aggregates, hooks, soft-delete, and more.
Authors
Posts

				
Set, inspect, and delete cookies in real time using the built-in cookieParser middleware.

				

This demo doubles as a readable API reference and playground — try uploading files, inspect the returned JSON, and use the playground to test parsers. Clone the repo and run npm run docs to explore the documentation/ source.

Copied!