{% extends "_layout" %}
{% block content %}
Apache-2.0 The Node framework that owns its stack. Zero npm runtime dependencies. Post-quantum crypto from line zero. Sealed-by-default storage. Audit chain on every operator action.
BlameJS
This site is the docs and a working reference app — every page you read renders through the framework's own primitives.
npm install @blamejs/core
node -e 'require("@blamejs/core").createApp({ dataDir: "./data" })'
Or browse the source layout of this very wiki for a full reference app:
var b = require("@blamejs/core");
var app = await b.createApp({
dataDir: "./data",
routes: function (router) {
router.get("/", function (req, res) {
b.render.htmlString(res, "<h1>Hello from blamejs</h1>");
});
},
});
await app.listen({ port: 3000 });
Pick the area you're working on:
{{ c.description }}
{% endfor %}lib/vendor/ with a manifest pinning version + license + provenance.vault.seal() or a derived hash.blamejs vendors a small set of exceptional third-party libraries. Their work is the foundation the framework is built on — every cryptographic operation, passkey handshake, and certificate the framework signs runs through their code. All MIT-licensed; full attribution lives in NOTICE.
b.pqcSoftware)b.mtlsCa)