Yatta JS 1.0 is out. It is a backend framework for Bun where there is no separate backend tier to provision. The runtime itself carries ten engines: a type safe SQLite ORM, auth (passkeys, TOTP 2FA, Argon2id, AES 256 GCM sessions), a job queue with cron and dead letter queues, L1 plus SQLite L2 cache with stale while revalidate, local and S3 storage, transactional mail, unified SSE and WebSocket realtime, observability with SLOs, and an OpenTelemetry bridge. Single entry point. No build step, TypeScript runs directly.
Some engineering details: the worker runtime sizes its CPU and IO pools from the host core count instead of spawning one worker per core, streamed request bodies have byte caps, token consumption is atomic, and rate limiting is bounded against forged keys. 889 tests pass. The repo benchmarks itself in CI on every push, around 70k req/s on a plain GET route on shared runners.
MIT licensed, built solo in Liberia. Docs: https://yatta.js.org. Repo: https://github.com/psrockstar098/yatta.js. npm: The npm package drops tomorrow, Oct 18.
I am the author and happy to take hard questions on the architecture, the security audit, or what got cut to reach 1.0.
Comments URL: https://news.ycombinator.com/item?id=50131511
Points: 1
# Comments: 0

