
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@forgekit/cli
Advanced tools
ForgeKit is a modular scaffolding tool that helps you spin up full‑stack projects with your choice of frontend, backend and UI frameworks. It creates the initial directory structure, initializes Git and installs required dependencies so you can start coding right away.
Install the package globally and run the CLI:
npm install -g @forgekit/cli
forge
Running forge will prompt you step‑by‑step for a frontend, UI library, backend
and optional database. Choices are filtered so only compatible combinations are
shown. The project is created in the directory where you executed the command
and when scaffolding finishes you will be dropped into a shell inside the new
project folder.
The tool can also be configured programmatically. Example configuration from the project plan:
{
projectName: "acme-site",
frontend: "react-vite",
backend: "express",
ui: "tailwind",
targetDir: "./acme-site"
}
You can also use npx without installing globally:
npx @forgekit/cli
This behaves the same as the global install, prompting for details and placing you in the newly created project directory when finished.
If the forge command is not found after a global install, ensure your npm
global bin directory is in your PATH.
You can typically add it with:
$env:Path += ";$(npm bin -g)"
You can verify your environment at any time with the built in doctor command:
forge --doctor
forge loginRun this command to authenticate the CLI with your ForgeKit account. Your web
browser will open to complete the login flow and the received token will be
stored in ~/.forgekit/config.json.
Example config file:
{
"token": "USER_JWT"
}
forge deployRun this command to publish your project. It will:
bundle.tar.gz (defaults to dist/, overridable with --build-dir).If you are not logged in, the command will open a browser and prompt you to authenticate before deploying.
If a forgekit.json file exists it will be used to auto-detect the build directory based on the scaffolded stack.
The deploy endpoint can be customized with the FORGEKIT_DEPLOY_URL environment variable.
Example:
forge deploy --build-dir .next
ForgeKit aims to streamline bootstrapping modern JavaScript projects by providing a collection of ready‑to‑use stacks with minimal setup hassle.
Run tests with:
npm test
To update the stack documentation after modifying the available options run:
npm run generate-stack-docs
This will regenerate STACKS.md based on the registry files.
There is currently no formal CONTRIBUTING guide, but pull requests and issues are welcome.
FAQs
Modular full-stack project scaffolding tool
We found that @forgekit/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.