</>PackageGraphPackageGraph

koa

npmv3.2.1

Koa web app framework

Adopt with care

koa is usable, with caveats. Pulls in 79 transitive packages, about 1.4 MB installed (at least — some of the tree is still being crawled).

  • AAdoption: grade A, Excellent.

    6.8M downloads per week.

  • BMaintenance: grade B, Good.

    Last published 112 days ago. 21 releases in the last 2 years.

  • DWeight: grade D, Poor — a real concern.

    Pulls in 79 transitive packages, about 1.4 MB installed (at least — some of the tree is still being crawled).

  • ASupply chain: grade A, Excellent.

    No install scripts, 11 maintainers, and a contained dependency surface.

  • ALicense: grade A, Excellent.

    MIT — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding koa to a project.

18
Direct dependencies

Runtime packages this one declares itself.

79
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

1.4 MB
Install size

Unpacked size of this package plus its entire runtime tree.

5
Tree depth

Longest resolved dependency chain below this package.

Part of this dependency tree has not been crawled yet, so these figures are a lower bound rather than a final total.

Licenses in the dependency tree

ISCMIT

Every license you inherit by installing koa, not just its own. Check this before a legal review, not after.

Compatibility

Node.js
node >= 18
Module format
ESM + CommonJS
TypeScript
No bundled types
Install scripts
None

Quick start

A usage example from the koa README.

jsFull README ↗
const Koa = require('koa');
const app = new Koa();

// response
app.use(ctx => {
  ctx.body = 'Hello Koa';
});

app.listen(3000);

koa vs the alternatives

Packages solving a similar problem in the npm ecosystem, compared on the signals that drive an adoption decision.

PackageWeekly downloadsDependentsLicenseLast release
koathis page6.8M0MIT3 months ago
hono04MIT1 day ago
express92.8M17MIT1 day ago
connect07MIT1 day ago
next40.6M0MIT1 day ago
fastify8.9M4MIT1 day ago

Dependencies

Declared by koa v3.2.1. Runtime dependencies are installed with the package; dev dependencies are not.

Runtime (18)

accepts ^1.3.8content-disposition ~1.0.1content-type ^1.0.5cookies ~0.9.1delegates ^1.0.0destroy ^1.2.0encodeurl ^2.0.0escape-html ^1.0.3fresh ~0.5.2http-assert ^1.5.0http-errors ^2.0.0koa-compose ^4.1.0mime-types ^3.0.1on-finished ^2.4.1parseurl ^1.3.3statuses ^2.0.1type-is ^2.0.1vary ^1.1.2

Dev (5)

c8 ^10.1.3gen-esm-wrapper ^1.1.3snazzy ^9.0.0standard ^17.1.2supertest ^7.1.1

Relationship graph

Dependencies (left) and dependents (right) of koa.

koa-composecontent-typeencodeurlescape-htmlparseurlhttp-errorson-finishedtype-isfreshhttp-assertacceptscontent-dispositi…cookiesdelegatesstatusesmime-typesvarykoa
koa dependencies dependents

Release history

20 releases in the last two years, typically about 8 days apart.

Recent versions of koa
VersionPublishedSizeLicense
3.2.1latest3 months ago64 KBMIT
3.2.05 months ago63 KBMIT
2.16.46 months ago61 KBMIT
3.1.26 months ago63 KBMIT
3.1.110 months ago63 KBMIT
3.1.010 months ago63 KBMIT
2.16.310 months ago61 KBMIT
3.0.310 months ago63 KBMIT
3.0.210 months ago63 KBMIT
2.16.21 year ago61 KBMIT
3.0.11 year ago63 KBMIT
3.0.01 year ago62 KBMIT
3.0.0-alpha.51 year ago63 KBMIT
2.16.11 year ago60 KBMIT
3.0.0-alpha.41 year ago62 KBMIT

Overview

koa is an npm package that koa web app framework. It is very popular, with about 6.8M downloads per week. The latest version is 3.2.1, released under the MIT license.

Who should use it

Teams working in the npm ecosystem who need koa web app framework and value a battle-tested, widely-adopted solution.

When not to use it

Consider an alternative if you need to minimize your dependency tree, have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.

Pros

  • Large, well-established user base (6.8M weekly downloads).
  • Clear open-source license (MIT).

Cons

  • Large dependency tree (23 direct dependencies) increases install size and audit surface.
  • No bundled TypeScript types (may require a separate @types package).

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

3imed-jaberiaaroncoderhaoxindead_horsefengmk2jongleberryjuliangruberljharbniftylettucetitanismtjholowaychuk

Keywords

appapplicationframeworkhttpmiddlewarerackweb

Frequently asked questions

Should I use koa?

koa is usable, with caveats. Pulls in 79 transitive packages, about 1.4 MB installed (at least — some of the tree is still being crawled).

How do I install koa?

Run `npm install koa` to add koa to your npm project.

How many dependencies does koa have?

koa declares 23 direct dependencies and pulls in 79 packages in total once its runtime tree is resolved totalling about 1.4 MB on disk.

What license is koa released under?

koa is distributed under the MIT license. Its dependency tree also includes: ISC, MIT.

How popular is koa?

koa has approximately 6,779,881 downloads per week.

Is koa still maintained?

The most recent release of koa (v3.2.1) was published 3 months ago.

Does koa run install scripts?

No. koa does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.