• 🚀 Integrated Frontend & Backend: Seamlessly combine React frontend with Express-based microservices
• 🔒 Enterprise-Grade Security: Production-ready security with Helmet, rate limiting, XSS protection, CSRF tokens, and input sanitization
• 🌐 Advanced CORS Management: Flexible CORS configuration with whitelist, dynamic origins, and preset configurations
• 🛡️ Input Validation: Schema-based validation with Joi, automatic sanitization, and file upload validation
• 🔑 Multiple Auth Options: JWT authentication, API key validation, and role-based access control
• 📊 Audit Logging: Comprehensive audit trail for security events, authentication, and data access
• ⚡️ Built-in Authentication: Ready-to-use authentication service with JWT support and password policies
• 🎯 TypeScript Support: First-class TypeScript support out of the box
• 🔄 Custom Hooks: Powerful hooks for service integration and state management
• 🛠 CLI Tools: Efficient development workflow with project scaffolding and code generation
• 📦 Microservices Architecture: Built-in support for microservices development
• 🎨 Customizable: Flexible configuration and extensible architecture

# Create a new project using npx (recommended)
npx @rahmanazhar/stellar-js create my-app

# Or install globally
npm install -g @rahmanazhar/stellar-js
stellar create my-app

# Create a new StellarJS project
npx @rahmanazhar/stellar-js create my-app

# Navigate to project directory
cd my-app

# Start development server
npm run dev

Visit http://localhost:3001 to see your app in action!

StellarJS v1.0.0 comes with enterprise-grade security enabled out of the box:

import { createServer } from '@rahmanazhar/stellar-js';

const server = createServer({
  port: 3000,
  auth: {
    jwtSecret: process.env.JWT_SECRET!,
  },
  // Security features enabled by default!
  security: {
    helmet: true, // Security headers
    rateLimit: true, // Rate limiting (100 req/15min)
    xss: true, // XSS protection
    noSqlInjection: true, // NoSQL injection prevention
    hpp: true, // HTTP Parameter Pollution protection
    sanitization: true, // Automatic input sanitization
  },
  cors: {
    origins: ['https://yourdomain.com'],
    credentials: true,
  },
});

await server.start();

See Security Documentation for advanced configurations.

For detailed documentation, visit our Documentation Site:

• Getting Started Guide
• Core Concepts
• API Reference
• Examples

// Define your service
class UserService {
  async getUsers() {
    return [
      { id: 1, name: 'John Doe' },
      { id: 2, name: 'Jane Smith' },
    ];
  }
}

// Use in components
function UserList() {
  const { data, loading } = useService('user', 'getUsers');

  if (loading) return <div>Loading...</div>;

  return (
    <ul>
      {data.map((user) => (
        <li key={user.id}>{user.name}</li>
      ))}
    </ul>
  );
}

# Create new project
stellar create my-app

# Generate components/services
stellar generate component UserList
stellar generate service User

# Development
stellar dev

# Production build
stellar build

We welcome contributions! Please see our Contributing Guide for details.

1. Fork the repository
2. Create your feature branch (git checkout -b feature/AmazingFeature)
3. Commit your changes (git commit -m 'Add some AmazingFeature')
4. Push to the branch (git push origin feature/AmazingFeature)
5. Open a Pull Request

• GitHub Discussions
• Discord Server
• Twitter

StellarJS takes security seriously. Version 1.0.0 includes:

• ✅ Helmet - Secure HTTP headers
• ✅ Rate Limiting - Prevent brute force attacks
• ✅ XSS Protection - Sanitize inputs
• ✅ NoSQL Injection Prevention - Protect your database
• ✅ CORS - Flexible cross-origin configuration
• ✅ Input Validation - Schema-based with Joi
• ✅ Audit Logging - Track all security events
• ✅ API Key Authentication - Secure service-to-service communication

See Security Documentation for details.

🎉 Major Release - Production ready with enterprise-grade security!

• 🔒 Comprehensive security middleware (Helmet, XSS, rate limiting, etc.)
• 🌐 Advanced CORS management with presets and dynamic validation
• 🛡️ Schema-based validation with Joi
• 🔑 Multiple authentication strategies (JWT, API keys, RBAC)
• 📊 Audit logging system with queryable events
• 🔐 Security utilities (encryption, hashing, token generation)
• ⚡ Performance optimized with minimal overhead
• 📚 Extensive documentation and examples

See CHANGELOG.md for complete details.

Copyright © 2023 Rahman Azhar. This project is MIT licensed.