I would recommend SailsJS. It's built with Express, so you get the Express ecosystem, but it comes with a lot of things that production-apps need out of the box, like security (CORS, CSRF), REST API generation, code conventions (models, controllers, views), etc.

I believe they went through YC, actually.