API starters · Rank #92
express-ts-auth-service
Grade F: derived only from the two verdicts below. How grades work
A ready-to-use authentication service build with express.js, that provides secure and reliable authentication using JSON Web Tokens (JWT) and refresh token rotation
Why this verdict
How we check →- No commits in 90 days; last commit 708 days ago. receipt ↗
- Prisma 4 declared; latest is 7 (3 majors behind). receipt ↗
- Express 4 declared; latest is 5 (1 major behind). receipt ↗
- Not counted in verdict: TypeScript 5 → 7. receipt ↗
Snapshot: commit fc6722b on main, checked 2026-10-19 06:49 UTC. Receipts link to files at this exact commit.
- Two or more breaking releases behind on a core dependency.
Dependency freshness
| Package | Declared | Latest | Status |
|---|---|---|---|
| Prisma @prisma/client | 4.11.0 | 7.10.1 | 3 majors behind |
| TypeScript typescript | 5.0.2 | 7.0.2 | Behind, not counted |
| Express express | 4.18.2 | 5.3.0 | 1 major behind |
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What's in the stack
- Framework
- Express
- Database / ORM
- Prisma
- Nodemailer
- Testing
- Jest
Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.
What the README says you get
- APICORS support
Allows cross-origin resource sharing using CORS
- APIJoi input validation
Validates user input with the powerful and flexible Joi library
- AuthJWT authentication
Implements secure authentication measures with JWTs
- AuthArgon2 password hashing
Implements robust password hashing using Argon2
- AuthRefresh token rotation
Incorporates refresh token rotation functionality
- AuthPassword reset
Provides a reset password function
- EmailEmail verification
Includes email verification functionality for new user sign-ups
- EmailNodemailer email sending
Facilitates sending of emails using nodemailer library
- OtherGZIP compression
Enables faster data transfer by implementing GZIP compression
- OtherHelmet security middleware
Implements essential security features using Helmet middleware
- OtherCookie parsing
Parses cookies seamlessly with cookie-parser middleware
- OtherXSS sanitization
Sanitizes request data against cross-site-scripting with xss middleware
- OtherRate limiting
Implements rate limiting to prevent abuse
- TestingJest and Supertest testing
thorough testing using Jest and Supertest
Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote. A README claim is the maker's description, not something we tested.
Watch express-ts-auth-service
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 19, 2026 | Dormant | 2+ majors behind | 0 |
| Oct 12, 2026 | Dormant | 2+ majors behind | 0 |
| Sep 29, 2026 | Dormant | 2+ majors behind | 0 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (main) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- package.json ↗ declared dependency versions and stack (at commit fc6722b)
- README ↗ quoted features at the checked commit
- npm registry ↗ latest versions (each linked in the table above)