# ExpressGateway/express-gateway

A microservices API Gateway built on top of Express.js

Repository: https://github.com/ExpressGateway/express-gateway
Canonical: https://ross.abutalabs.com/products/express-gateway
Homepage: https://www.express-gateway.io
Language: JavaScript
License: Apache-2.0
License Family: permissive
Topics: api-gateway, expressjs, express-middleware, microservices, oauth2, oauth2-server, express-gateway, microservice, javascript, security, endpoints, service-discovery
Last push: 2024-05-14T10:22:42+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 3711, "days_push": 841, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3031, forks 354 (observed 2026-08-28T04:07:38.936712+00:00)

## What it is
Express Gateway is a microservices API gateway built on Node.js and Express.js that secures, proxies, and manages APIs using Express middleware, with features like OAuth2, key authentication, consumer management, hot-reloading config, a CLI, and a plugin framework. It is language-agnostic for upstream services and runs anywhere Node.js or Docker runs.

## Use cases
- expose microservices as managed APIs through a gateway
- add OAuth2 or key-based authentication in front of backend services
- proxy and rate-limit requests to microservices or serverless functions
- manage API consumers and credentials centrally
- build a custom API gateway with Express middleware plugins
- run an API gateway in Docker or Kubernetes without extra infrastructure

## When to choose
- your stack is Node.js/Express and you want a gateway you can extend with familiar middleware
- you need a lightweight, self-hosted gateway with declarative config and hot reload
- you want built-in OAuth2 and API consumer/credential management
- you prefer a code-level, plugin-friendly gateway over heavyweight commercial solutions

## When to avoid
- you need an actively maintained project - it is officially deprecated and no longer maintained
- you require high-performance, non-JavaScript gateway internals or advanced enterprise features
- you want long-term support, security patches, or community fixes going forward
- you need a gateway with first-class service mesh or modern cloud-native integrations

## Facets
- artifact type: service
- maturity: abandoned
- function: api-gateway, proxy, auth, middleware, rate-limiting, cli
- domain: microservices, apis, backend, security, developer-tools
- platform: self-hosted, cloud
- tags: expressjs, oauth2, api-management, serverless, hot-reload, plugin-architecture, nodejs, docker

## Member repositories
- ExpressGateway/express-gateway (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:38.936712+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:29:48.228954+00:00, confidence not recorded.
  - readme: https://github.com/ExpressGateway/express-gateway (fetched 2026-08-28T04:07:38.936712+00:00, sha cd61462b8fdb)
  - homepage: https://www.express-gateway.io (fetched 2026-08-29T09:45:05.443106+00:00, sha e79e36b32acc)
  - site_page: https://www.express-gateway.io/about (fetched 2026-08-29T09:45:05.445561+00:00, sha 59aeec0fda98)
  - site_page: https://www.express-gateway.io/getting-started (fetched 2026-08-29T09:45:05.447762+00:00, sha 9f11842bd6ae)
  - site_page: https://www.express-gateway.io/docs (fetched 2026-08-29T09:45:05.449533+00:00, sha 74d46b3a9e29)
  - registry_npm: https://registry.npmjs.org/express-gateway (fetched 2026-08-29T09:45:05.451103+00:00, sha 018ed0907eca)
- Data as of 2026-08-30T08:39:29.467469+00:00.