# 0http

> Zero friction HTTP request router. The need for speed!

Latest version **5.2.0** (published 2026-10-09) · MIT license · 0 weekly downloads

## Install

```sh
npm install 0http
pnpm add 0http
yarn add 0http
bun add 0http
```

## Health

**Score 65/100 (B)** — status: active.

Positive: has types; no vulnerabilities; recently updated; high maintenance score; high quality score.

Warnings: low downloads; no esm support.

## Facts

| | |
|---|---|
| Version | 5.2.0 |
| Published | 2026-10-09 |
| First published | 2019-03-16 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | bundled |
| Module format | CommonJS |
| Node | >=22.x |
| Dependencies | 3 |
| Unpacked size | 59.4 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 168 |
| Author | Rolando Santamaria Maso |
| Maintainers | jkyberneees |
| Keywords | http, server, router, rest |

## Links

- npm: https://www.npmjs.com/package/0http
- Repository: https://github.com/BackendStack21/0http
- Homepage: https://github.com/BackendStack21/0http#readme
- Issues: https://github.com/BackendStack21/0http/issues
- npm.io page: https://npm.io/package/0http

## Dependencies (3)

- [trouter](https://npm.io/package/trouter.md) ^4.0.0
- [lru-cache](https://npm.io/package/lru-cache.md) ^11.5.1
- [regexparam](https://npm.io/package/regexparam.md) ^3.0.0

## Alternatives

- [express-promise-router](https://npm.io/package/express-promise-router.md) — 736.1K weekly downloads
- [next-usequerystate](https://npm.io/package/next-usequerystate.md) — 29.8K weekly downloads
- [@bitkyc08/opencodex](https://npm.io/package/@bitkyc08/opencodex.md) — 4.6K weekly downloads
- [lynkr](https://npm.io/package/lynkr.md) — 575 weekly downloads
- [baremetal.js](https://npm.io/package/baremetal.js.md) — 42 weekly downloads

## Recent versions

- 5.2.0 (latest) — 2026-10-09
- 5.1.1 — 2026-09-06
- 5.1.0 — 2026-06-21
- 5.0.1 — 2026-05-31
- 5.0.0 — 2026-05-14
- 4.4.0 — 2025-11-18
- 4.3.0 — 2025-07-31
- 4.2.1 — 2025-05-25
- 4.2.0 — 2025-02-25
- 4.1.0 — 2025-01-26
- 4.0.0 — 2025-01-04
- 3.5.3 — 2024-04-06
- 3.5.2 — 2023-04-22
- 3.5.1 — 2023-03-03
- 3.5.0 — 2023-03-03
- … 31 more at https://npm.io/package/0http/versions

## README

# Introduction
[![NPM version](https://badgen.net/npm/v/0http)](https://www.npmjs.com/package/0http)
[![NPM Total Downloads](https://badgen.net/npm/dt/0http)](https://www.npmjs.com/package/0http)
[![License](https://badgen.net/npm/license/0http)](https://www.npmjs.com/package/0http)
[![TypeScript support](https://badgen.net/npm/types/0http)](https://www.npmjs.com/package/0http)
[![Github stars](https://badgen.net/github/stars/jkyberneees/0http?icon=github)](https://github.com/jkyberneees/0http)

<img src="docs/0http-logo.svg" width="400">  

Zero friction HTTP framework:
- Tweaked Node.js HTTP server for high throughput.
- High-performance and customizable request routers. 

![Performance Benchmarks](docs/Benchmarks.png)

> Check it yourself: https://web-frameworks-benchmark.netlify.app/result?f=feathersjs,0http,koa,fastify,nestjs-express,express,sails,nestjs-fastify,restana

## Installation

Install the package from npm:

```bash
npm install 0http
```

## Usage
```js
const cero = require('0http')
const { router, server } = cero()

router.get('/hello', (req, res) => {
  res.end('Hello World!')
})

router.post('/do', (req, res) => {
  // ...
  res.statusCode = 201
  res.end()
})

//...

server.listen(3000)
```

### Trie router (dependency-free, fastest)
A segment-trie router with the same API, middleware chaining, nested routers
and error containment as the default sequential router, but no regex per route,
no route cache to size, and no external dependencies. Static routes resolve in
constant time and dynamic routes stay flat as the route count grows.

```js
const trie = require('0http/lib/router/trie')
const { router, server } = cero({ router: trie() })

router.use((req, res, next) => next())
router.get('/users/:id', (req, res) => res.end(req.params.id))
router.get('/files/*', (req, res) => res.end(req.params['*']))
```

Options: `caseSensitive` (default `true`), `ignoreTrailingSlash` (default
`true`), plus `defaultRoute`, `errorHandler` and `id`. Patterns: `/static`,
`/:param`, `/:param?`, `/:name.ext` (or `/:name.ext?`), trailing `/*` and
`RegExp` (named groups become params). Static segments are literal, so `/a+b`
only matches `/a+b`.

Differences from the sequential router, on purpose:
- Case-sensitive by default; `caseSensitive: false` folds ASCII letters only.
- A `*` that is not the last segment, or a `?` that is not the last character
  of a param segment, throws at registration instead of matching too much.
- An absent optional param is simply not present on `req.params` (the
  sequential router sets it to `undefined`, which also clobbers an inherited
  param of the same name).
- A trailing `/*` also matches the bare prefix, with `'*'` equal to `''`.
- Empty route segments are ignored (`/a//b` is `/a/b`); the sequential router
  truncates the route at the first empty segment.
- With `ignoreTrailingSlash: false`, a route registered as `/dir/` matches
  `/dir/` only and `/dir` matches `/dir` only.
- A request path that does not start with `/` matches nothing.
- `router.routes` lists RegExp routes only; there is no `cacheSize` option.

# Support / Donate 💚
You can support the maintenance of this project: 
- PayPal: https://www.paypal.me/kyberneees

# Security notes

- **Errors never crash the process.** A route handler that throws (or rejects)
  after response headers are already sent is contained: the response is ended or
  the socket closed, and the server keeps serving. A custom `errorHandler` that
  itself throws or rejects is also contained with a bare `500`. If the response
  has already ended, the custom `errorHandler` is skipped (writing to an ended
  response would raise an uncatchable stream error). A throwing or rejecting
  `defaultRoute` is contained the same way.
- **Mount prefixes are stripped from the path only.** The query string never
  becomes part of a nested router's path, so `GET /api/acme?x=/admin` reaches
  the router mounted at `/api/:tenant` as `/?x=/admin`, never as `/admin`.
- **Sequential route matching is case-insensitive.** `/Admin`, `/admin` and
  `/ADMIN` all match a route registered as `/admin`. Reverse proxies, WAFs and
  auth layers that classify paths case-sensitively must be aligned accordingly.
  The trie router is case-sensitive by default and treats static segments
  literally (no regex meaning), so it agrees with such layers out of the box.
- **Mount nested routers with `use()`.** Only `router.use(prefix, subRouter)`
  rewrites the URL when entering a nested router. A router passed to `get()` or
  `on()` is treated as a plain middleware and will not match its sub-routes.
- **Nested routers own unmatched requests.** If a mounted router finds no route
  for the rewritten URL, it responds `404` itself and the parent chain is not
  resumed (unlike Express mounted apps, which fall through).
- **The route cache is memory-bounded.** Matches with parameters, `404`s, and
  paths longer than 4KB are never cached, and the cache is additionally capped
  by total size — so attacker-controlled unique paths cannot pin memory. The
  trie router has no request-keyed cache at all: its static table holds one
  entry per registered route and known HTTP method, never per request path.

# More
- Website and documentation: https://0http.21no.de

---
_Source: https://npm.io/package/0http · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._