mrkeyoor.com_
Fri 16 Oct 20:35 UTC
Webevaluationupdated 16 Oct 2026

elpis review

Elpis is a full-stack business application framework with a NestJS backend, Vue pages and a Vite frontend builder, documented primarily in Chinese with no English guide found. It uses schema configuration to describe dashboard tables, forms and menus so teams can reuse common screen patterns.

Verdict

Our Elpis run built in 5 seconds, but Mocha ran 0 tests and npm audit reported 50 vulnerabilities, including 1 critical and 23 high. I would hold off on production adoption until the dependency findings are addressed and real application checks run. Its schema-driven dashboard deserves evaluation only if those conventions closely match your business screens.

We ran it

Lab card: what happened when we ran elpisScreenshot of elpis (github.com/fsiaonma/elpis)
Install✓ · 25s865 packages · 473 MB
Build✓ · 5s
Tests✓ · 1s0 passed · 0 failed of 0 (mocha)
Known vulns501 critical · 23 high · 24 moderate · 2 low (npm audit)
Repo164 files~9,051 lines of source · 1.1 MB · 0 CI workflows · tests dir

Answers from our run

Does elpis build from source?

Dependencies installed in 25 seconds (865 packages), and the build succeeded in 5 seconds. We cloned commit d5c0ddd into a clean Debian container with 3 CPUs and no project-specific setup.

Do elpis's tests pass?

Yes: 0 of 0 passed when we ran the project's own test command (mocha). Some failures need services or credentials a bare container does not have.

Does elpis have known vulnerabilities in its dependencies?

npm audit flagged 50 known advisories in the dependency tree, including 1 critical at the time of our run.

Who should not use elpis?

Teams requiring clean dependency audits before adoption: our run reported 50 vulnerabilities, including 1 critical and 23 high.

What are the alternatives to elpis?

NestJS, create-vue. Our Elpis run built in 5 seconds, but Mocha ran 0 tests and npm audit reported 50 vulnerabilities, including 1 critical and 23 high.

Setup2/5Build passes, but a separate business application needs setup
Docs3/5Detailed Chinese configuration examples, no English guide found
Community2/5584 stars and September 29 push, no visible issue conversation
Maturity1/550 audit findings, 0 executed tests and no CI workflows

Who it’s for

Chinese-reading teams already comfortable with NestJS modules and Vue applications.
Internal application developers whose screens match schema-driven tables and forms.
Maintainers willing to investigate the audit findings and add meaningful application checks.

Who it’s NOT for

Teams requiring clean dependency audits before adoption: our run reported 50 vulnerabilities, including 1 critical and 23 high.
Teams expecting a successful test exit to demonstrate regression coverage: our Mocha command completed with 0 tests.
English-only teams needing an English framework guide: the README and design guide inspected are Chinese.
Developers expecting the framework checkout alone to provide their business application: the README puts business modules and startup commands in a separate application repository.

Setup reality

Our sandbox installed commit d5c0ddd in 25 seconds, adding 865 packages and using 473 MB. The build passed in 5 seconds. Tests exited successfully in 1 second, but Mocha ran 0 tests. Npm audit reported 50 vulnerabilities: 1 critical, 23 high, 24 moderate and 2 low.

The README expects a separate business application with compiled Nest modules, plus Vite and Nest development processes. Your application supplies its own service configuration. The OpenAI-compatible AI path additionally requires model endpoint settings and a valid API credential.

Framework TypeScript changes need recompilation and an application restart. The Chinese documentation explains directory conventions, but we found no English guide. Our no-secrets container run did not validate a running business dashboard, model call or MCP integration.

Schema configuration builds dashboard pages around NestJS

Elpis combines a NestJS backend with Vue pages and a Vite frontend builder for business applications. Its documentation is primarily Chinese, and we found no English guide in the repository. The interesting part is its dashboard model: menu configuration selects schema-driven views, custom pages or embedded content. For an internal application with many similar forms and tables, those conventions could save repeated wiring. You have to want its application structure to benefit.

Our checkout contained 164 files and about 9,051 source lines. The README shows how schema properties map to table columns, search controls and create or edit forms. That gives a developer a fairly concrete picture of what adopting the framework means. You describe an application's screens through configuration and add custom components when the stock conventions run out. The README includes those examples, although understanding them requires reading Chinese comments.

What happened when we ran it

Our sandbox installed commit d5c0ddd in 25 seconds, adding 865 packages and using 473 MB on disk. The build succeeded in 5 seconds. The October 15, 2026 run used lab-node:22 in an unprivileged container with 3 CPUs, 8 GB of RAM and no secrets. This establishes that the measured source could compile in that environment. It does not establish that a business application started or that its dashboard behaved correctly.

The test command succeeded in 1 second, but Mocha reported 0 passed and 0 failed out of 0 tests. That is an empty result, and we give it no credit as a regression check. Our scan found a tests directory but 0 CI workflow files and no Dockerfile. A directory name and a successful command exit are weaker evidence than assertions that actually ran against application behaviour.

Npm audit reported 50 known vulnerabilities: 1 critical, 23 high, 24 moderate and 2 low. The supplied measurements do not identify affected packages, dependency paths or exposure through a deployed application. Calling this a confirmed remote exploit would exceed the evidence. The actionable conclusion is that dependency review belongs before deployment, with the critical and high findings understood and addressed rather than hidden behind the successful build.

A business repository supplies the runnable application

Elpis exposes serverStart and frontendBuild, with additional Nest exports for application extensions. The README uses a separate business repository, such as elpis-demo, to supply modules and development commands. Its documented development flow runs Vite and Nest in separate terminals. This is a framework to incorporate into an application, so cloning the framework is only part of reaching a useful working screen.

The 865 packages we measured cover the framework environment, while your business application's services and configuration add their own responsibilities. The README describes compiled business modules being discovered under dist/modules. Changes to framework TypeScript need recompilation and a business-process restart. A team already comfortable with Nest modules and Vue should recognize the pieces. A newcomer must learn both those tools and Elpis's directory and configuration conventions together.

The model examples expose the cost of custom conventions

The dashboard configuration carries separate options for table display, searching, creation and editing. A property can choose a control type, supply an enumeration or load choices through an API. Row buttons have configured events, while custom views and components live in documented framework directories. That is useful when most screens share a shape. It also means that an unusual interaction may send you into the framework's own component registration rules.

Our 5-second build is encouraging for iterating on the code, but the 0-test result leaves those application contracts unchecked by our run. Before adopting Elpis, build a representative screen with a real validation error and an actual update request. Confirm what the API returns and what the user sees. The README discusses preserved response formats and cookie behaviour, yet compilation cannot verify that your business modules follow those expectations.

AI support adds model configuration and MCP processes

The repository also contains agent, retrieval and memory modules. More concretely, its model configuration loader reads ai.llm, selects a configured model and supports an OpenAI-compatible path or a custom provider. The compatible path rejects a missing or placeholder API credential. You therefore need your own endpoint configuration and credentials when using that path, rather than assuming the framework build includes a working assistant.

None of our 1-second test step established a successful agent call. The MCP client can launch a configured local command or contact an HTTP server to list and call tools. That is real integration code, but our lab did not verify interoperability. Review the configured commands and remote destinations with the same care you give application services, especially before an agent can use tools against business data.

Recent source activity leaves little public support evidence

The last push was September 29, 2026. GitHub listed 584 stars, 0 open issues and PRs, and no entries in the issue list we fetched. The latest-release endpoint returned no release. A recent push rules out a judgement based only on an old tag, while the empty issue history offers little evidence about how maintainers handle outside users' problems. The README is more detailed about framework development than about supporting an unfamiliar production deployment.

For a new application, I would start by comparing plain NestJS with a Vue project created through create-vue. That leaves more integration work with your team, while keeping the underlying frameworks' documentation directly applicable. Elpis earns a closer look if its schema-driven dashboard matches your screens closely enough to justify its conventions. Before shipping, resolve the 50 audit findings and replace the empty Mocha result with checks that exercise your actual application.

Alternatives

ProjectWhat it isPick it when
NestJS gh↗A TypeScript backend framework for application modules and services.pick this instead when you want to design your backend directly without Elpis dashboard conventions.
create-vueThe Vue project scaffolder for a Vite-based frontend.pick this instead when you want a Vue application with control over its forms, routing and backend integration.

What people are saying

  1. [velocity-scout] fsiaonma/elpis

Sources

  1. Elpis README and configuration examples
  2. Repository facts
  3. Package entry points
  4. Model configuration loader
  5. MCP client implementation
  6. Issue activity
  7. NestJS
  8. create-vue

More web reviews

dioramas · deepseek-whale-girl · floorplan-3d · taro · driver.js · PriceAI · the whole board →