Is It Dead Yet?
expressnpm
- latest 5.2.1
- licence MIT
- stars 69,417
- checked yesterday
- registry ↗
- repository ↗
Signals · last 2 checks
Commits 90d
17
Open issues
106
Unanswered
2
Contributors
34
What the project says about itself
Release lifecycle
The latest release, 5.2.1, is on the 5 line, with no end-of-life date scheduled.
| Line | Released | Status | Latest |
|---|---|---|---|
| 5 | 2024-09-09 | supported | 5.2.1 |
| 4 | 2014-04-09 | supported | 4.22.2 |
| 3 | 2012-10-23 | end of life since 2015-07-05 | 3.21.2 |
| 2 | 2011-03-17 | end of life since 2012-07-01 | 2.5.11 |
| 1 | 2010-11-16 | end of life since 2011-03-01 | 1.0.9 |
Source: endoflife.date, from the project's release policy.
- Build provenance — the latest release carries no provenance attestation. Source: the registry.
- Supported runtime — node >= 18. Source: the registry.
- Publishers on the registry — 5. Source: the registry.
- Funding — opencollective.com/express. Source: the registry.
- Open milestones — 5.0 17/19 done; 6.x 0/1 done. Source: the repository's milestones.
- OpenSSF Scorecard — 8.5 / 10 on 2026-08-17. Source: OpenSSF, via deps.dev. A third party's view of security practice, not part of the health score.
Third-party facts checked yesterday; registry facts on every crawl.
State history 1
| When | Change |
|---|---|
| 2026-09-03 | first verdict: active |
Badge
Drop this in your README. It re-renders itself as the verdict changes.
[](https://isitdeadyet.dev/npm/express)Watch it
Get told when express changes state, changes licence, or is deprecated — instead of finding out during an incident.
Free for up to 25 packages. Signing in is a link sent to your email — there is no password to choose.