Open-source middleware software
2362 open-source libraries, tools and applications tagged middleware, ranked by how closely middleware is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2362 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| openzipkin/brave Brave is a dependency-free Java distributed tracing library that instruments production services to gather timing data, propagate trace con… | 70 | 2406 | stable |
| QuickBirdEng/XCoordinator XCoordinator is a Swift framework for iOS that implements the coordinator pattern to manage navigation and transitions between view control… | 60 | 2393 | stable |
| thomseddon/traefik-forward-auth A minimal forward authentication service that adds Google/OpenID Connect OAuth-based SSO login in front of any HTTP service behind the Trae… | 53 | 2391 | active |
| Wolverine Wolverine is a next-generation .NET mediator and message bus framework for building robust event-driven server-side applications. It provid… | 96 | 2386 | active |
| jazzband/django-push-notifications A Django app that provides Device models for sending push notifications to mobile devices and browsers via APNS, FCM/GCM, WNS, and WebPush.… | 74 | 2381 | active |
| cytostack/openwolf OpenWolf is a Node.js CLI that maintains a single portable project memory (a .wolf/ directory) shared across coding agents like Claude Code… | 79 | 2378 | active |
| Rob--W/cors-anywhere CORS Anywhere is a Node.js reverse proxy that adds CORS headers to proxied requests, allowing browsers to make cross-origin requests to ser… | 32 | 9365 | maintenance |
| Webpack A Node.js middleware that adds webpack hot module replacement (HMR) to your own HTTP server, working alongside webpack-dev-middleware witho… | 10 | 2372 | stable |
| eapache/go-resiliency A Go library implementing common resiliency patterns such as circuit breaker, retrier, deadline/timeout, batching, and semaphore. It is ins… | 23 | 2368 | stable |
| sergiodxa/remix-utils Remix Utils is a TypeScript collection of utility functions and types for building web apps with Remix and React Router, covering areas lik… | 88 | 2367 | active |
| hwi/HWIOAuthBundle A Symfony bundle that adds OAuth 1.0a and OAuth 2.0 authentication support, with built-in support for 59 providers such as Google, GitHub, … | 71 | 2361 | active |
| unrolled/secure Secure is an HTTP middleware library for Go that adds quick security wins to web applications. It works as a standard net/http Handler and … | 55 | 2358 | stable |
| hashicorp/go-retryablehttp A Go library providing an HTTP client wrapper around net/http with automatic retries and exponential backoff. It exposes a nearly identical… | 65 | 2353 | stable |
| maticzav/nookies Nookies is a lightweight set of cookie helpers for Next.js that supports parsing, setting, and destroying cookies on both the client and se… | 66 | 2351 | stable |
| 404labfr/laravel-impersonate A Laravel package that lets authenticated users (typically admins) impersonate other users of the application with a single method call or … | 61 | 2345 | active |
| ulule/limiter A dead-simple rate limiting middleware library for Go supporting HTTP, FastHTTP, and Gin. It uses a pluggable store approach with built-in … | 23 | 2343 | stable |
| onury/accesscontrol A Node.js library implementing Role-Based Access Control (RBAC) merged with Attribute-Based Access Control (ABAC), including role inheritan… | 93 | 2330 | active |
| CHAMP CHAMP is an open-source ROS-based development framework for building quadruped robots and developing locomotion control algorithms, based o… | 32 | 2323 | active |
| castleproject/Core Castle Core is a foundational .NET library providing logging service abstractions, the Castle DynamicProxy lightweight runtime proxy genera… | 54 | 2314 | stable |
| GrahamDumpleton/wrapt wrapt is a Python module providing transparent object proxies for building function wrappers, decorators, and monkey patching utilities. It… | 100 | 2312 | stable |
| auth0/nextjs-auth0 The Auth0 Next.js SDK is a TypeScript library for adding user authentication to Next.js applications via Auth0. It handles sign-in, sign-ou… | 98 | 2310 | active |
| fastapiutils/fastapi-utils A Python library of reusable utilities for FastAPI that reduces boilerplate across projects. It provides class-based views, CRUD resource c… | 23 | 2307 | active |
| twikoojs/twikoo Twikoo is a simple, safe, and free comment system designed for static websites, deployable via Tencent CloudBase, Vercel, or private server… | 100 | 2304 | active |
| a466350665/smart-sso Smart-SSO is a lightweight single sign-on (SSO) authentication and authorization center built on Spring Boot, implementing the OAuth2 autho… | 66 | 2299 | active |
| php-fig/event-dispatcher php-fig/event-dispatcher holds the official PSR-14 interfaces describing the components of an event dispatcher in PHP. It is a specificatio… | 32 | 2284 | stable |
| ardalis/Specification A .NET library implementing the Specification pattern for building reusable, composable query specifications, commonly used with EF Core an… | 50 | 2282 | stable |
| xmppjs/xmpp.js xmpp.js is a modular JavaScript library implementing the XMPP (Extensible Messaging and Presence Protocol) for building chat clients and co… | 78 | 2278 | active |
| santigarcor/laratrust Laratrust is a PHP package for Laravel that manages roles and permissions (RBAC/ACL) for users, with support for multiple user models, team… | 67 | 2274 | active |
| swaywm/wlroots wlroots is a modular C library providing pluggable, composable modules for building Wayland compositors, including hardware backends, proto… | 10 | 2274 | active |
| Apache RocketMQ Apache RocketMQ Spring Integration is a Spring Boot starter that lets Java developers quickly integrate RocketMQ messaging into Spring appl… | 78 | 2273 | active |
| antoinezambelli/forge Forge is a Python framework providing a reliability layer for self-hosted LLM tool-calling, with guardrails like rescue parsing, retry nudg… | 80 | 2257 | active |
| rehypejs/rehype rehype is an HTML processor powered by plugins, part of the unified collective, that parses HTML into an AST (hast) so plugins can inspect … | 58 | 2257 | active |
| pion/turn Pion TURN is a Go library providing an API for building TURN (Traversal Using Relays around NAT) clients and servers, part of the Pion WebR… | 96 | 2256 | active |
| Giraffe Giraffe is a functional micro web framework for F# that runs on top of ASP.NET Core. Applications are composed of HttpHandler functions tha… | 84 | 2256 | active |
| Caddy Security (AuthCrunch) A security app and plugin for Caddy v2 providing authentication, authorization, and accounting (AAA). It supports Form-Based, Basic, Local,… | 98 | 2254 | active |
| karafka/karafka Karafka is a multi-threaded Ruby and Rails framework for efficiently consuming and producing Apache Kafka messages, built on librdkafka. It… | 97 | 2252 | stable |
| pay-rails/pay Pay is a payments engine (Rails engine gem) for Ruby on Rails 6.0+ that standardizes integration with payment processors like Stripe, Brain… | 97 | 2252 | active |
| symfony/web-profiler-bundle Symfony WebProfilerBundle is a development tool that collects and displays detailed information about the execution of any HTTP request in … | 93 | 2252 | active |
| App Metrics App Metrics is an open-source, cross-platform .NET library for recording and reporting application metrics such as gauges, counters, meters… | 34 | 2248 | active |
| typelevel/cats-effect Cats Effect is a high-performance, purely functional asynchronous runtime for Scala built around the IO monad and a typeclass hierarchy def… | 96 | 2240 | stable |
| asdcorp/ohook ohook is a C-written hook library that masquerades as the Office sppc.dll to intercept the SLGetLicensingStatusInformation license check, e… | 19 | 2237 | active |
| google/ngx_brotli A set of two NGINX modules that add Brotli compression support: one compresses HTTP responses on-the-fly and the other serves pre-compresse… | 23 | 2235 | active |
| posva/pinia-colada Pinia Colada is a smart data fetching layer for Vue applications built on top of Pinia. It provides automatic caching with request deduplic… | 87 | 2232 | active |
| rebing/graphql-laravel A Laravel package providing code-first GraphQL integration built on webonyx/graphql-php. Schemas are defined in PHP classes with support fo… | 90 | 2222 | active |
| Remix Auth Remix Auth is a complete open-source authentication library for Remix and React Router applications, inspired by Passport.js and built on t… | 73 | 2203 | stable |
| rpush/rpush Rpush is a Ruby gem for sending push notifications across multiple services including APNs, Firebase Cloud Messaging, Webpush, Pushy, Amazo… | 32 | 2203 | active |
| HubSpot/offline Offline.js is a small browser JavaScript library that automatically detects when users lose internet connectivity and shows a themed online… | 10 | 8565 | maintenance |
| pointfreeco/swift-dependencies A Swift dependency management library inspired by SwiftUI's environment, for controlling dependencies like API clients, dates, and file acc… | 94 | 2195 | active |
| Capsule Capsule is a Kubernetes Operator that turns a single cluster into a shared multi-tenant platform by grouping namespaces into Tenant abstrac… | 96 | 2179 | active |
| steipete/Aspects Aspects is a small Objective-C/Swift library for aspect-oriented programming that hooks into existing methods per class or per instance usi… | 10 | 8414 | maintenance |
| stuartsierra/component A small Clojure library for managing the lifecycle and dependencies of stateful components such as database connections, web servers, and c… | 50 | 2163 | stable |
| PipeWire/pipewire PipeWire is a server and user-space API for handling multimedia pipelines on Linux, providing a low-latency, graph-based engine for audio a… | 75 | 2160 | stable |
| AaronLasseigne/active_interaction ActiveInteraction is a Ruby gem for managing application-specific business logic through service objects that integrate seamlessly with Rai… | 50 | 2148 | stable |
| Python Social Auth The Django integration component of the python-social-auth ecosystem, providing social authentication and registration via OAuth2 and other… | 95 | 2146 | active |
| TrustKit TrustKit is an open-source Objective-C framework that simplifies deploying SSL public key pinning and reporting in iOS, macOS, tvOS, and wa… | 74 | 2144 | active |
| sogou/srpc SRPC is an enterprise-level C++ RPC framework built on Sogou C++ Workflow, used in production at Sogou for tens of billions of daily reques… | 85 | 2143 | active |
| Kludex/mangum Mangum is a Python adapter that runs ASGI applications (FastAPI, Starlette, Quart, Django, etc.) inside AWS Lambda. It translates API Gatew… | 88 | 2142 | active |
| vyuldashev/laravel-queue-rabbitmq A RabbitMQ queue driver for the Laravel framework, implemented as a Composer-installable PHP package. It lets Laravel applications use Rabb… | 70 | 2132 | active |
| adamfisk/LittleProxy LittleProxy is a high-performance HTTP(S) proxy written in Java on top of the Netty networking library. It can be run standalone from the c… | 23 | 2130 | active |
| krakenjs/zoid Zoid is a JavaScript toolkit for building cross-domain components that render as iframes or popups on a different domain while passing prop… | 76 | 2126 | active |
| ruby-shoryuken/shoryuken Shoryuken is a super-efficient, thread-based message processor for Amazon SQS written in Ruby. It integrates with Rails Active Job and prov… | 93 | 2125 | active |
| slawlor/ractor Ractor is a pure-Rust actor framework inspired by Erlang's gen_server, providing actor message processing, supervision trees, and lifecycle… | 93 | 2115 | active |
| vulcand/oxy Oxy is a Go library of HTTP middleware handlers that extend the standard net/http library with reverse proxying, load balancing, rate limit… | 70 | 2105 | active |
| dotnetcore/EasyCaching EasyCaching is a .NET caching library that unifies basic and advanced caching usage behind a common abstraction. It supports multiple backe… | 24 | 2095 | active |
| prometheus-net prometheus-net is a .NET library for instrumenting application code with Prometheus metrics such as counters, gauges, histograms, and summa… | 23 | 2095 | active |
| kubernetes-sigs/prometheus-adapter A Kubernetes API adapter that implements the custom.metrics.k8s.io, resource, and external metrics APIs backed by Prometheus queries. It en… | 66 | 2094 | active |
| jquery/jquery-migrate jQuery Migrate is a browser plugin that restores APIs removed from jQuery core and logs console warnings when deprecated or removed APIs ar… | 86 | 2093 | stable |
| pallets-eco/blinker Blinker is a fast Python library for in-process signal/event dispatching, letting any number of receivers subscribe to events or 'signals' … | 43 | 2093 | stable |
| savonrb/savon Savon is a SOAP client library for Ruby that reads WSDL documents, maps service operations to Ruby methods, and converts between Ruby hashe… | 96 | 2086 | active |
| FooSoft/anki-connect AnkiConnect is an Anki plugin that exposes a local HTTP/JSON remote API for programmatically creating and managing flash cards, decks, and … | 10 | 2083 | active |
| ledgetech/lua-resty-http A Lua HTTP client cosocket driver for OpenResty / ngx_lua, supporting HTTP 1.0/1.1, SSL, streaming response bodies, keepalives, and request… | 78 | 2078 | stable |
| elixir-tesla/tesla Tesla is a flexible HTTP client library for Elixir built around a composable middleware stack and pluggable adapters such as Mint, Finch, a… | 100 | 2077 | stable |
| sindresorhus/emittery Emittery is a small, zero-dependency JavaScript library providing an async-first event emitter with strongly typed events, async iteration,… | 88 | 2074 | stable |
| ice-lab/icestark icestark is a framework-agnostic micro-frontends solution for large web applications, providing a main application that registers, loads, a… | 49 | 2073 | active |
| laurentS/slowapi SlowAPI is a rate limiting library for Starlette and FastAPI, adapted from flask-limiter and built on top of the limits package. It support… | 82 | 2070 | stable |
| TurtleBot3 Official ROS packages for the ROBOTIS TurtleBot3 mobile robot platform, providing drivers, bringup, and core launch/configuration files. It… | 84 | 2065 | active |
| alibaba/anyproxy AnyProxy is a fully configurable HTTP/HTTPS proxy server built on Node.js, supporting custom rule modules to intercept, modify, and inspect… | 32 | 7897 | maintenance |
| kwhitley/itty-router Itty Router is an ultra-tiny (~450B-1kB) TypeScript HTTP router library designed for serverless and edge environments like Cloudflare Worke… | 83 | 2050 | active |
| upstash/ratelimit-js A TypeScript rate limiting library backed by Upstash Redis that works over HTTP, making it suitable for serverless and edge runtimes. It pr… | 93 | 2046 | stable |
| Commanded Commanded is an Elixir framework for building applications using the CQRS (Command Query Responsibility Segregation) and Event Sourcing (ES… | 85 | 2035 | stable |
| redux-observable/redux-observable redux-observable is RxJS-based middleware for Redux that lets you handle action side effects using 'Epics'—functions that take a stream of … | 72 | 7804 | maintenance |
| sahat/satellizer Satellizer is a token-based authentication module for AngularJS with built-in support for major OAuth providers (Google, Facebook, Twitter,… | 23 | 7787 | maintenance |
| expressjs/cookie-parser Express/Node.js middleware that parses the HTTP Cookie header and populates req.cookies with name-value pairs. It also supports signed cook… | 57 | 2030 | stable |
| CJY0208/react-activation A React library that implements Vue's <keep-alive /> component caching behavior, preserving component state when they are unmounted and rem… | 29 | 2027 | active |
| CANopenNode CANopenNode is a free and open-source CANopen protocol stack written in ANSI C, implementing the standardized CiA301 (EN 50325-4) higher-la… | 60 | 2020 | stable |
| adamchainz/django-htmx django-htmx provides extensions for integrating htmx with Django, including middleware, template helpers, and request utilities. It simplif… | 76 | 2018 | active |
| softonic/axios-retry An Axios plugin that intercepts failed HTTP requests and automatically retries them with configurable retry counts and delay strategies. It… | 41 | 2015 | active |
| xuxueli/xxl-sso XXL-SSO is a lightweight, distributed single sign-on (SSO) framework for Java/Spring applications. It supports login, permission, and role … | 91 | 2011 | active |
| ambethia/recaptcha A Ruby gem providing helper methods for Google's reCAPTCHA API, supporting v2 checkbox, invisible, and v3 score-based verification. It offe… | 68 | 2006 | stable |
| visionmedia/page.js page.js is a tiny Express-inspired client-side router for single-page applications, supporting route parameters, middleware chains, and the… | 23 | 7674 | maintenance |
| Cysharp/MessagePipe MessagePipe is a high-performance in-memory and distributed messaging pipeline library for .NET and Unity. It supports pub/sub, mediator pa… | 81 | 2001 | active |
| pubkey/broadcast-channel A JavaScript library implementing the BroadcastChannel API across browsers, WebWorkers, Node.js, and Deno, enabling message passing between… | 79 | 2001 | active |
| gin-contrib/cors The official CORS (Cross-Origin Resource Sharing) middleware for the Gin web framework in Go. It provides configurable handling of allowed … | 93 | 2000 | stable |
| imcvampire/vue-axios A small wrapper library that integrates the axios HTTP client into Vue.js applications, binding axios to the Vue instance so it can be acce… | 82 | 1996 | stable |
| alandtse/alexa_media_player A Home Assistant custom component that controls Amazon Alexa/Echo devices through the unofficial Alexa API, exposing them as media player e… | 100 | 1989 | active |
| c15t/c15t c15t is an open-source, developer-first consent management platform (CMP) for cookie banners, privacy preferences, consent storage, and con… | 85 | 1989 | active |
| manfredsteyer/angular-oauth2-oidc A TypeScript library adding OAuth 2, OAuth 2.1, and OpenID Connect support to Angular applications. It handles token issuance, validation, … | 87 | 1983 | stable |
| asaskevich/EventBus A lightweight event bus library for Go supporting synchronous and asynchronous subscribe/publish patterns with topic-based handlers. It als… | 32 | 1983 | stable |
| mewebstudio/Purifier A Laravel service provider that wraps the HTMLPurifier library for sanitizing HTML input. It provides a simple clean() helper and Purifier … | 69 | 1982 | stable |
| mikenicholson/passport-jwt passport-jwt is a Passport authentication strategy for Node.js that authenticates HTTP requests using JSON Web Tokens. It extracts a JWT fr… | 32 | 1981 | active |