RELEASE • @expressive-tea/core v2.0 • March 2026
Expressive Tea 2.0 Is Here
A modern TypeScript-first framework for building scalable Node.js applications
After months of work, Expressive Tea 2.0 is officially out. This is a ground-up rethink of the framework — new security model, modernized dependency injection, Express 5 support, and a complete migration to the @expressive-tea/core package namespace.
If you’ve been using @zerooneit/expressive-tea, now’s the time to upgrade. The old package stays around for security patches until April 2026, but all new development lives under the new name.
What Changed
Security
Fixed critical crypto vulnerabilities in the Teapot/Teacup gateway. Now using AES-256-GCM + HKDF. If you were on v1.3.x beta — stop everything and upgrade.
Architecture
Express 5, InversifyJS 7, TypeScript strict mode, scoped DI, built-in health checks, .env support with @Env decorator.
Developer Experience
New package namespace, ESLint v9 flat config, 95%+ test coverage, Vitest migration, cleaner APIs all around.
Get Started
npm install @expressive-tea/core reflect-metadataMigration from v1 is straightforward — update your package.json, imports stay the same. There’s a full migration guide if you need it.
Breaking Changes
A few things to be aware of:
- Node.js 20+ required (Node 18 hit EOL April 2025)
- Express 5.x required
- Cryptography format changed — you’ll need to re-encrypt any Teapot/Teacup data
- TypeScript strict mode is now the default
- ESLint v9 flat config
If you’ve been on v1.2.x production, the upgrade path is clean. If you were on v1.3.x beta — please read the security advisory carefully.
More details coming in a follow-up post where I’ll break down every new feature. For now — go brew some tea.
Ready to upgrade?
Install the new package and start building with Expressive Tea 2.0
