hoppscotch/hoppscotch
Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia
How hoppscotch is put together
Hoppscotch is an open-source API development ecosystem structured as a pnpm monorepo with multiple packages. The frontend clients (hoppscotch-common, hoppscotch-selfhost-web, hoppscotch-sh-admin) are Vue 3 + Vite SPAs, while the backend (hoppscotch-backend) is a NestJS server exposing GraphQL (Apollo) and REST, backed by PostgreSQL via Prisma and Redis for GraphQL subscriptions. Desktop/agent apps are built with Tauri (Rust), a native request relay is written in Rust (hoppscotch-relay), and a Node CLI runs test scripts in CI. Auth is handled via Passport (GitHub/Google/Microsoft OAuth, JWT, local) with data synced through the backend.
Languages
Frameworks
Datastores
Infrastructure
Major components
hoppscotch-backend
NestJS server exposing GraphQL (Apollo) + REST APIs, handling auth, teams, collections, and data sync backed by Prisma/PostgreSQL and Redis subscriptions.
hoppscotch-common
Shared Vue 3 frontend core containing the main API client UI, locales, and GraphQL codegen used by web/desktop clients.
hoppscotch-selfhost-web
Self-hosted web SPA build of the Hoppscotch client served via Caddy/Docker.
hoppscotch-sh-admin
Vue admin dashboard for managing self-hosted instances (users, teams, insights).
hoppscotch-desktop / hoppscotch-agent
Tauri (Rust + Vue) desktop app and agent providing native request execution capabilities.
hoppscotch-relay
Rust-based native request relay for making HTTP requests bypassing browser CORS restrictions.
hoppscotch-cli
Node CLI (hopp) to run Hoppscotch collections/test scripts in CI environments using an isolated-vm sandbox.
hoppscotch-js-sandbox
Sandboxed JavaScript execution environment for pre-request scripts and post-request tests.
The team cut the July 2026.7.0 release while fixing data-loss bugs and patching security dependencies.
This week centered on shipping the July release (version 2026.7.0) of Hoppscotch across the desktop, backend, and web apps, while hardening the product against data loss and security risks. Several fixes protect users' saved requests and workspace data, and dependency updates patch known vulnerabilities.
Chore
July release rolled out
The desktop app, backend, and web apps were all bumped to version 2026.7.0 (26.7.0 for desktop).
Fix
Protected large team collections from data loss
Requests inside big shared team collections are no longer at risk of disappearing.
Fix
Prevented personal workspace data loss
Closed a bug that could cause users to lose data in their personal workspace.
Chore
Patched vulnerable dependencies
Several third-party libraries were pinned to secure, patched versions to close known security holes.
Feature
Environment value fallback
Environment variables now fall back to their initial value when a current value is missing, avoiding unexpected empty values.
Feature
Connection timeout limits for desktop
The desktop app now enforces sensible minimum and maximum bounds on connection timeouts.
Dependencies and code review
Dependency advisories
Security Watch
No known advisories across 8 scanned dependencies.
No known advisories in the scanned dependencies.
Code review
No concrete code-level issues confirmed.
Get this report every week for your repos.
GitZoid learns each repo, reports what changed, and flags what needs attention. One flat price for the whole team.
$19 a month, flat · First 10 outputs free · No card required