skip to content

// open source template

Express boilerplate

A production-grade Express and TypeScript starter that other developers actually fork.

A fully wired Express, TypeScript and Prisma backend with layered clean architecture, dependency injection, JWT and CSRF security, structured logging, automated security scanning and CI/CD. It also ships AI agent instructions so coding tools understand the codebase from day one.

source
// pipeline02/21
year
2025
type
open source template
group
platforms and backends
stars
36

the problem

//01the problem

Most Express starters stop at hello world. Teams then spend weeks wiring auth, errors, logging and pipelines, and every project does it slightly differently.

how it works

//02how it works

  1. 01

    Layered by responsibility

    Routes, controllers, services and repositories each own one job, wired through a small DI container so any layer can be swapped or tested in isolation.

  2. 02

    Security as defaults

    Access and refresh tokens in hardened cookies, a CSRF double-submit pattern, security headers and rate limiting are on from the first request.

  3. 03

    Errors with a shape

    A typed error hierarchy and Prisma error mapping mean every failure leaves the API in the same predictable response format.

  4. 04

    Automation around the code

    Pre-commit hooks, conventional commits, CodeQL static analysis, TruffleHog secret scanning and dependency review run on every change.

measured

//03measured

30+
github stars
counted on the repository
8
forks
developers starting new services from it
5
checks on every change
pre-commit, conventional commits, codeql, trufflehog, dependency review

highlights

//04highlights

  • 30+ stars and 8 forks from developers starting new services
  • Clean architecture with a DI container
  • JWT with refresh rotation plus CSRF protection
  • Agent instructions so AI coding tools follow the conventions

built with

  • Express
  • TypeScript
  • Prisma
  • PostgreSQL
  • Zod
  • Vitest
  • Docker

//05contact

Say hello. I read everything.

Email is the fastest way to reach me. For anything that needs a conversation, book a call.

book a callsave contact

to

name
Khaled Saeed
email
contact@khaledsaeed.tech
country
Lebanon