API starters · Rank #58
node-express-mongoose-typescript-boilerplate
Grade D: derived only from the two verdicts below. How grades work
A boilerplate for making production-ready RESTful APIs using Node.js, TypeScript, Express, and Mongoose
Why this verdict
How we check →- No commits in 90 days; last commit 598 days ago. receipt ↗
- Express 4 declared; latest is 5 (1 major behind). receipt ↗
- Not counted in verdict: TypeScript 4 → 7. receipt ↗
Snapshot: commit 278143d on master, checked 2026-10-19 06:29 UTC. Receipts link to files at this exact commit.
Dependency freshness
| Package | Declared | Latest | Status |
|---|---|---|---|
| TypeScript typescript | 4.5.4 | 7.0.2 | Behind, not counted |
| Express express | 4.17.1 | 5.3.0 | 1 major behind |
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What's in the stack
- Framework
- Express
- Database / ORM
- MongoDB (Mongoose)
- Nodemailer
- Testing
- Jest
Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.
What the README says you get
- APIRequest validation
Validation: request data validation using Joi
- APISwagger API docs
API documentation: with swagger-jsdoc and swagger-ui-express
- AuthJWT authentication
Authentication and authorization: using passport
- AuthRefresh tokens
refresh auth tokens
- AuthPassword reset
send reset password email
- DataMongoose ODM
NoSQL database: MongoDB object data modeling using Mongoose
- DeployDocker support
Docker support
- DeployPM2 process management
Process management: advanced production process management using PM2
- OtherCentralized error handling
Error handling: centralized error handling mechanism
- OtherWinston logging
Logging: using winston and morgan
- OtherSecurity headers
Security: set security HTTP headers using helmet
- OtherCORS enabled
CORS: Cross-Origin Resource-Sharing enabled using cors
- OtherGzip compression
Compression: gzip compression with compression
- TestingJest tests
Testing: unit and integration tests using Jest
Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote. A README claim is the maker's description, not something we tested.
Watch node-express-mongoose-typescript-boilerplate
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
RSS feed for node-express-mongoose-typescript-boilerplate · all changes
History
Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 19, 2026 | Dormant | 1 major behind | 0 |
| Oct 12, 2026 | Dormant | 1 major behind | 0 |
| Sep 29, 2026 | Dormant | 1 major behind | 0 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (master) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- package.json ↗ declared dependency versions and stack (at commit 278143d)
- README ↗ quoted features at the checked commit
- npm registry ↗ latest versions (each linked in the table above)