
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Ship production-ready REST APIs in minutes 🐿️ • Documentation 📖
Yasui (meaning "easy" in Japanese) is a lightweight multi-runtime framework built on Web Standards and pushed with SRVX, that brings the developer experience of modern frameworks without the complexity. It runs on Node.js, Deno, and Bun, providing the structure you need with just the features you'll actually use.
npm install yasui
import yasui, { Controller, Get } from 'yasui';
@Controller('/')
export class AppController {
@Get('/')
hello() {
return { message: 'Hello World!' };
}
}
yasui.createServer({
controllers: [AppController]
});
Production-ready middlewares and utilities for YasuiJS:
YasuiJS adopts a class-based, object-oriented approach with decorators, bringing significant architectural advantages:
Classes and decorators provide better organization, encapsulation, and maintainability. This approach naturally supports established architectural patterns like onion architecture, hexagonal architecture, and clean architecture.
Built-in dependency injection enables loose coupling, better testability, and cleaner separation of concerns. Dependencies are explicitly declared and automatically resolved.
Instead of manually registering routes and extracting parameters, you declare what you want using decorators. The framework handles the implementation details.
Built on web standards, YasuiJS provides a portable, standard codebase for JavaScript runtimes, capable of running on Node.js, Deno, and Bun with SRVX, a universal server abstraction based on the Fetch API. Future-proof your applications with standard web APIs.
Contributions are welcome! Please feel free to submit issues and pull requests.
Please use npm run commit to standardize commits nomenclature.
This project is licensed under the GNU Affero General Public License v3.0 or later. See the LICENSE file for details.
FAQs
Lightweight multi-runtime framework for REST and web APIs
The npm package yasui receives a total of 17 weekly downloads. As such, yasui popularity was classified as not popular.
We found that yasui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.