Open-source middleware software
2362 open-source libraries, tools and applications tagged middleware, ranked by how closely middleware is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2362 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| ADD-SP/ngx_waf ngx_waf is a high-performance Nginx firewall module written in C that provides web application firewall capabilities. It is compatible with… | 66 | 1635 | active |
| storj/drpc drpc is a lightweight, drop-in replacement for gRPC written in Go, with a small dependency footprint and a fast custom wire format. It is t… | 76 | 1632 | active |
| Totodore/socketioxide Socketioxide is a Socket.IO server implementation in Rust built as a Tower layer/service, integrating with the Tokio and Hyper ecosystems. … | 96 | 1631 | active |
| delvedor/find-my-way find-my-way is a high-performance HTTP router for Node.js built on a radix tree (compact prefix tree). It is framework independent and supp… | 95 | 1631 | stable |
| django/asgiref asgiref is the reference library for the ASGI (Asynchronous Server Gateway Interface) specification, providing base utilities for Python as… | 77 | 1631 | stable |
| Finbuckle/Finbuckle.MultiTenant Finbuckle.MultiTenant is an open source multi-tenancy library for modern .NET, primarily targeting ASP.NET Core and Entity Framework Core a… | 97 | 1630 | stable |
| Spring Integration Spring Integration extends the Spring programming model to implement Enterprise Integration Patterns, enabling lightweight messaging within… | 96 | 1629 | stable |
| laravel/reverb Laravel Reverb is a first-party, open-source WebSocket server for Laravel applications, built on the Pusher protocol. It integrates seamles… | 99 | 1627 | active |
| Zizaco/entrust Entrust is a Laravel package that adds role-based permissions (RBAC) to Laravel applications, providing Role and Permission models, migrati… | 23 | 5999 | maintenance |
| karlseguin/http.zig http.zig is an HTTP/1.1 server library written in Zig, providing routing, middleware, WebSockets, and server-sent events. It is designed as… | 76 | 1620 | active |
| apollographql/graphql-subscriptions A small TypeScript library that implements GraphQL subscriptions by wiring a PubSub system (e.g., EventEmitter or Redis) into GraphQL resol… | 23 | 1616 | stable |
| mdias/rs_asio RS ASIO is a runtime patch for Rocksmith 2014 Edition - Remastered that injects fake WASAPI devices backed by ASIO audio drivers, enabling … | 89 | 1614 | active |
| pgjones/hypercorn Hypercorn is an ASGI and WSGI web server for Python based on sans-io hyper libraries and inspired by Gunicorn. It supports HTTP/1, HTTP/2, … | 52 | 1612 | active |
| joypad-ai/joypad-os Joypad OS (formerly USBRetro) is open-source C firmware for microcontrollers (RP2040, ESP32-S3, nRF52840) that turns any input device into … | 96 | 1610 | active |
| xtaci/smux Smux is a stream multiplexing library for Go that runs many logical streams over a single reliable connection such as TCP or KCP. It minimi… | 63 | 1607 | stable |
| pagehelper-org/pagehelper-spring-boot A Spring Boot starter that integrates the PageHelper pagination plugin for MyBatis. It auto-configures PageHelper so developers can add phy… | 87 | 1605 | active |
| atinux/nuxt-auth-utils A Nuxt module that adds authentication to Nuxt applications using secured and sealed cookie sessions. It supports 40+ OAuth providers, pass… | 86 | 1601 | active |
| throttled/throttled Throttled is a Go library that implements rate limiting using the generic cell rate algorithm (GCRA) to limit access to resources such as H… | 57 | 1598 | stable |
| forkingdog/FDFullscreenPopGesture An Objective-C category on UINavigationController that enables fullscreen interactive pop gestures in iOS 7+ system style via AOP, requirin… | 32 | 5873 | maintenance |
| Blade Blade is a lightweight, high-performance MVC web framework for Java 8 built on Netty 4, with RESTful routing, a built-in template engine, a… | 56 | 5869 | maintenance |
| OneSignal The official OneSignal SDK plugin for React Native, enabling integration of push notifications, in-app messages, SMS, and email engagement … | 100 | 1592 | active |
| Vite Ruby Vite Ruby is a set of Ruby libraries that integrate the Vite.js frontend build tool with Ruby frameworks like Rails and Hanami. It enables … | 76 | 1590 | active |
| metosin/reitit Reitit is a fast, data-driven routing library for Clojure and ClojureScript. It provides bi-directional routing, first-class route data, pl… | 92 | 1584 | stable |
| shinyorg/shiny Shiny is a cross-platform .NET framework that simplifies working with device hardware services and background processes on iOS, Android, Ma… | 67 | 1584 | active |
| vimalloc/flask-jwt-extended Flask-JWT-Extended is an open source Flask extension that adds JSON Web Token (JWT) support for protecting routes, with many optional batte… | 87 | 1580 | stable |
| spatie/laravel-honeypot A Laravel package that prevents spam form submissions using honeypot fields and submission-time checks. It provides a Blade component and m… | 91 | 1578 | stable |
| unitreerobotics/unitree_ros ROS packages providing robot descriptions and Gazebo simulation for Unitree robots (quadrupeds like Go1/Go2/A1 and humanoids like H1/G1). I… | 76 | 1578 | active |
| kirschbaum-development/eloquent-power-joins A Laravel package that brings Eloquent-style ergonomics to SQL joins, letting you join tables using relationship definitions via a joinRela… | 99 | 1572 | active |
| thephpleague/event League\Event is a PHP library for adding event-driven behavior to applications and domain models. It provides event dispatching, listeners,… | 34 | 1571 | stable |
| gin-contrib/sessions A Gin middleware package for session management in Go web applications, supporting multiple backends including cookie-based, Redis, memcach… | 89 | 1569 | stable |
| xmolecules/jmolecules jMolecules is a set of Java libraries that let developers explicitly express architectural and domain-driven-design concepts (entities, agg… | 52 | 1566 | active |
| aws/serverless-java-container A Java library that lets applications built with frameworks like Spring, Spring Boot, Jersey, Struts, and Spark run inside AWS Lambda. It t… | 88 | 1565 | active |
| Action Policy Action Policy is an authorization framework for Ruby and Rails applications, built around resource-specific policy classes with composable … | 65 | 1561 | stable |
| jshttp/http-errors http-errors is a Node.js library for creating HTTP error objects with status codes, messages, and custom properties. It integrates easily w… | 61 | 1561 | stable |
| LogRocket/redux-logger redux-logger is a Redux middleware that logs every dispatched action and the resulting state changes to the browser console. It supports cu… | 23 | 5713 | maintenance |
| joeldev/JLRoutes JLRoutes is an Objective-C URL routing library for iOS and macOS with a simple block-based API. It makes it easy to register URL patterns w… | 23 | 5700 | maintenance |
| richardgirges/express-fileupload express-fileupload is a simple Express middleware that wraps Busboy to handle multipart file uploads, exposing uploaded files on req.files.… | 33 | 1557 | active |
| sidebase/nuxt-auth @sidebase/nuxt-auth is a Nuxt 3+ module that adds authentication to universal Nuxt applications via OAuth providers, credentials, or email … | 93 | 1555 | active |
| chibisov/drf-extensions DRF-extensions is a collection of custom extensions for Django REST Framework, providing mixins, routers, caching, conditional requests, ne… | 62 | 1551 | active |
| ymyuuu/Cloudflare-Workers-Proxy A Cloudflare Workers script that acts as a simple reverse proxy, forwarding client requests to a target URL and returning the response. It … | 46 | 1551 | active |
| ServenScorpion/VirtualApp A fork of VirtualApp, an Android virtualization framework that runs apps inside a virtual container supporting app cloning (multi-instance)… | 75 | 1549 | active |
| nuxt/image Nuxt Image is an official Nuxt module providing plug-and-play image optimization for Nuxt applications. It offers drop-in <nuxt-img> and <n… | 85 | 1547 | stable |
| iamolegga/nestjs-pino A NestJS logger module built on Pino that injects request context into every log line. It works with both Express and Fastify and integrate… | 99 | 1546 | active |
| zoolutions/sidekiq-unique-jobs A Ruby gem that prevents duplicate Sidekiq background jobs using Redis-based locks. It provides multiple lock types and conflict strategies… | 80 | 1546 | active |
| Dreamland Pine is a dynamic Java method hooking framework for the Android ART runtime, allowing interception and modification of almost any Java meth… | 52 | 1541 | active |
| jshttp/cookie A small Node.js library for parsing and serializing HTTP Cookie and Set-Cookie headers. It provides functions to convert cookie header stri… | 78 | 1536 | stable |
| nefarius/HidHide HidHide is a Windows kernel-mode filter driver that acts as an 'input device firewall', allowing users to block individual applications' ac… | 60 | 1535 | active |
| mcallegari/qlcplus Q Light Controller Plus (QLC+) is a free, cross-platform application for controlling DMX and analog lighting systems such as moving heads, … | 87 | 1534 | active |
| OpenSIPS/opensips OpenSIPS is a GPL-licensed, open-source SIP server/proxy implementation written in C, forked from the SER project. It provides carrier-grad… | 75 | 1532 | stable |
| atomiks/floating-ui Floating UI is a JavaScript positioning library for anchoring floating elements like tooltips, popovers, and dropdowns next to reference el… | 10 | 1530 | active |
| tute/merit Merit is a Ruby gem that adds reputation behavior to Rails applications through badges, points, and rankings. It lets developers define rul… | 36 | 1529 | active |
| VirgilClyne/GetSomeFries A collection of JavaScript rewrite and script modules for proxy clients (Loon, Surge, Stash, Shadowrocket, Quantumult X) that unlock full A… | 65 | 1526 | active |
| zquestz/omniauth-google-oauth2 An OmniAuth strategy gem that enables Google OAuth2 authentication in Ruby applications. It integrates as Rack middleware (e.g., in Rails o… | 83 | 1524 | active |
| SimonCropp/Delta A .NET library that implements HTTP 304 Not Modified responses by leveraging database change tracking to generate ETags from last-updated t… | 77 | 1523 | active |
| OpenDDS/OpenDDS OpenDDS is an open-source C++ implementation of the OMG Data Distribution Service (DDS) specification for real-time publish-subscribe data … | 82 | 1515 | active |
| chihaya/chihaya Chihaya is a customizable, high-performance BitTorrent tracker written in Go that supports both HTTP and UDP announce protocols with IPv4 a… | 64 | 1509 | active |
| Core Flight System (cFS) NASA's Core Flight System (cFS) is a generic flight software architecture framework written in C, used on spacecraft ranging from flagship … | 86 | 1507 | stable |
| Broadway Broadway is a PHP library providing infrastructure and testing helpers for building CQRS and event-sourced applications. It offers loosely … | 10 | 1507 | active |
| elixir-horde/horde Horde is an Elixir library providing a distributed supervisor (Horde.DynamicSupervisor) and distributed registry (Horde.Registry) built on … | 69 | 1506 | active |
| steveklabnik/request_store RequestStore is a Ruby gem providing per-request global storage for Rack applications, replacing error-prone Thread.current usage with requ… | 23 | 1499 | stable |
| mariadb-corporation/MaxScale MariaDB MaxScale is an intelligent database proxy that forwards database statements to one or more backend database servers using complex r… | 56 | 1498 | active |
| spatie/laravel-cookie-consent A Laravel package by Spatie that adds a simple, customizable cookie consent banner to help sites comply with the EU cookie law. It displays… | 74 | 1495 | active |
| scottie1984/swagger-ui-express An Express middleware module that serves Swagger UI from a swagger.json (or generated spec) file, exposing interactive API documentation at… | 23 | 1494 | active |
| google/go-safeweb go-safeweb is a collection of Go libraries for building secure-by-default HTTP servers. It applies security mechanisms like XSS and CSRF pr… | 10 | 1493 | active |
| scientistproject/Scientist.net Scientist.net is a .NET library for carefully refactoring critical code paths by running old and new implementations side by side in produc… | 54 | 1490 | active |
| Shopify/semian Semian is a Ruby resiliency library that prevents cascading failures when accessing slow or unresponsive external services like databases a… | 84 | 1489 | stable |
| trallnag/prometheus-fastapi-instrumentator A configurable, modular Python library that instruments FastAPI applications with Prometheus metrics. It exposes default HTTP request metri… | 89 | 1488 | active |
| mitre/HTTP-Proxy-Servlet A single-file Java servlet that acts as an HTTP reverse proxy, built on Apache HttpClient. It lets Java web applications forward requests t… | 65 | 1488 | stable |
| serwist/serwist Serwist is a collection of TypeScript JavaScript libraries for building progressive web apps, forked from Google's Workbox. It provides ser… | 80 | 1487 | active |
| bwssytems/ha-bridge ha-bridge is a Java-based home automation bridge that emulates a Philips Hue light system, allowing voice assistants like Amazon Echo and h… | 37 | 1485 | active |
| rails-api/active_model_serializers ActiveModelSerializers is a Ruby library that provides an ActiveModel::Serializer implementation and Rails hooks for rendering model object… | 44 | 5341 | maintenance |
| wez/govee2mqtt A Rust-based bridge that connects Govee smart lights and devices to Home Assistant via the MQTT integration. It uses LAN control, Govee's u… | 62 | 1457 | active |
| COVESA/vsomeip vSomeIP is a C++ implementation of the SOME/IP (Scalable service-Oriented MiddlewarE over IP) protocol, built by BMW and maintained under C… | 96 | 1454 | active |
| Paritok-official/paritok-4b-v1 Paritok is a non-destructive compression gateway that sits as a drop-in proxy between AI coding agents (Claude Code, Cursor, Codex, OpenHan… | 56 | 1454 | active |
| flashbots/mev-boost MEV-Boost is open-source middleware (a sidecar) for Ethereum proof-of-stake validators that connects consensus clients to a competitive mar… | 75 | 1449 | active |
| Apollo-Reborn/Apollo-Reborn Apollo-Reborn is an iOS tweak (written in Logos) that revives the discontinued Apollo Reddit client by letting users supply their own Reddi… | 95 | 1444 | active |
| Shopify/graphql-batch A query batching executor for the Ruby graphql gem that lets GraphQL resolvers batch database lookups via custom loader classes. Loaders re… | 62 | 1443 | stable |
| nRF Connect SDK Nordic Semiconductor's nRF Connect SDK, the main repository containing subsystems, libraries, samples, and applications for developing firm… | 93 | 1431 | active |
| autoDecoder A Burp Suite extension (written in Java) that lets users plug in custom encryption/decryption logic so intercepted HTTP traffic can be view… | 68 | 1431 | active |
| aidenybai/bippy bippy is a TypeScript library that exposes React's internal Fiber tree and renderer APIs for metaprogramming. It lets you inspect fibers, t… | 86 | 1425 | active |
| ankane/pretender Pretender is a lightweight Ruby gem that lets admins log in as (impersonate) another user in Rails applications. It works with any authenti… | 62 | 1425 | stable |
| rails-api/rails-api Rails::API is a slimmed-down subset of Rails tailored for building API-only applications that serve JSON without the full middleware stack … | 32 | 5130 | maintenance |
| expressjs/serve-static A Node.js middleware library for serving static files from a root directory, built on the send module and commonly used with Express. It ha… | 79 | 1420 | stable |
| nvim-flutter/flutter-tools.nvim A Neovim plugin that enhances Flutter and Dart development using Neovim's native LSP client. It adds Flutter-specific tooling such as launc… | 65 | 1419 | active |
| symfony/web-link A Symfony component that manages links between resources via the Link HTTP header, implementing PSR-13, RFC 8288, RFC 9264 (Linkset), and R… | 90 | 1415 | stable |
| AimRT/AimRT AimRT is a high-performance runtime framework for modern robotics built on modern C++20, covering robot end-side, edge, and cloud deploymen… | 78 | 1411 | active |
| marshmallow-code/webargs webargs is a Python library for declarative parsing and validation of HTTP request arguments (query, form, JSON, headers, files), built on … | 75 | 1410 | stable |
| postcss/postcss-import A PostCSS plugin that inlines the content of CSS @import rules, resolving files from local paths, node_modules, or web_modules. It deduplic… | 63 | 1410 | active |
| L-Blondy/up-fetch upfetch is an advanced fetch client builder for TypeScript that wraps the native fetch API with schema validation, automatic response parsi… | 93 | 1408 | active |
| fukamachi/woo Woo is a fast, non-blocking HTTP server for Common Lisp built on top of libev, aiming to be among the fastest web servers in any language. … | 76 | 1406 | active |
| elixir-nebulex/nebulex Nebulex is an in-memory and distributed caching toolkit for Elixir that provides a cache abstraction layer similar to Ecto's database abstr… | 91 | 1403 | stable |
| rsinger86/django-lifecycle A Python library providing a @hook decorator and LifecycleModel base class for declarative model lifecycle hooks in Django. It serves as a … | 80 | 1403 | active |
| googleapis/google-auth-library-php Google's officially supported PHP client library for OAuth 2.0 authentication and authorization with Google APIs. It implements Application… | 98 | 1401 | stable |
| DualSubs/Universal DualSubs: Universal is a proxy-script-based solution that adds bilingual and translated subtitle options to HLS streaming platforms (e.g., … | 99 | 1397 | active |
| Hyperswitch Hyperswitch Prism is a stateless, unified connector library for integrating with 60+ payment processors (Stripe, Adyen, Braintree, PayPal, … | 87 | 1395 | active |
| Maasea/sgmodule A collection of Surge modules (sgmodule files) written in JavaScript that enhance or modify mobile apps and network behavior, such as remov… | 70 | 1395 | active |
| cypriss/mutations A Ruby gem for composing business logic into command objects that sanitize, coerce, and validate input before executing. It provides a stru… | 57 | 1393 | stable |
| tqwewe/kameo Kameo is a Rust library for building fault-tolerant, asynchronous actor-based systems on top of Tokio. It supports local and distributed me… | 87 | 1392 | active |
| USBGuard/usbguard USBGuard is a C++ software framework for implementing USB device authorization policies on Linux, protecting against rogue USB devices (Bad… | 65 | 1388 | active |
| Functions Framework An open-source FaaS framework for Node.js, based on Express, for writing portable functions that run on Google Cloud Run functions, Cloud R… | 93 | 1386 | active |