
Product
Introducing Repository Access Permissions and Custom Roles
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.
@adogrove/adonis-auditing
Advanced tools
A boilerplate for creating AdonisJS packages
This repo provides you with a starting point for creating AdonisJS packages. Of course, you can create a package from scratch with your folder structure and workflow. However, using this starter kit can speed up the process, as you have fewer decisions to make.
giget to download this repo without the Git history.
npx giget@latest gh:adonisjs/pkg-starter-kit
package.json file and define the name, description, keywords, and author properties.The starter kit mimics the folder structure of the official packages. Feel free to rename files and folders as per your requirements.
├── providers
├── src
├── bin
├── stubs
├── configure.ts
├── index.ts
├── LICENSE.md
├── package.json
├── README.md
├── tsconfig.json
├── tsnode.esm.js
configure.ts file exports the configure hook to configure the package using the node ace configure command.index.ts file is the main entry point of the package.tsnode.esm.js file runs TypeScript code using TS-Node + SWC. Please read the code comment in this file to learn more.bin directory contains the entry point file to run Japa tests.providers directory.src directory.stubs directory.We use snake_case naming conventions for the file system. The rule is enforced using ESLint. However, turn off the rule and use your preferred naming conventions.
The starter kit has a peer dependency on @adonisjs/core@6. Since you are creating a package for AdonisJS, you must make it against a specific version of the framework core.
If your package needs Lucid to be functional, you may install @adonisjs/lucid as a development dependency and add it to the list of peerDependencies.
As a rule of thumb, packages installed in the user application should be part of the peerDependencies of your package and not the main dependency.
For example, if you install @adonisjs/core as a main dependency, then essentially, you are importing a separate copy of @adonisjs/core and not sharing the one from the user application. Here is a great article explaining peer dependencies.
Instead of publishing your repo's source code to npm, you must cherry-pick files and folders to publish only the required files.
The cherry-picking uses the files property inside the package.json file. By default, we publish the following files and folders.
{
"files": ["build/src", "build/providers", "build/stubs", "build/index.d.ts", "build/index.js", "build/configure.d.ts", "build/configure.js"]
}
If you create additional folders or files, mention them inside the files array.
Node.js Subpath exports allows you to define the exports of your package regardless of the folder structure. This starter kit defines the following exports.
{
"exports": {
".": "./build/index.js",
"./types": "./build/src/types.js"
}
}
. export is the main export../types exports all the types defined inside the ./build/src/types.js file (the compiled output).Feel free to change the exports as per your requirements.
We configure the Japa test runner with this starter kit. Japa is used in AdonisJS applications as well. Just run one of the following commands to execute tests.
npm run test: This command will first lint the code using ESlint and then run tests and report the test coverage using c8.npm run quick:test: Runs only the tests without linting or coverage reporting.The starter kit also has a Github workflow file to run tests using Github Actions. The tests are executed against Node.js 20.x and Node.js 21.x versions on both Linux and Windows. Feel free to edit the workflow file in the .github/workflows directory.
tsconfig.json file is extended from @adonisjs/tsconfig and uses the NodeNext module system. Meaning the packages are written using ES modules.npm run type check script.Feel free to explore the tsconfig.json file for all the configured options.
The starter kit configures ESLint and Prettier
using our shared config.
ESLint configuration is stored within the eslint.config.js file.
Prettier configuration is stored within the package.json file.
Feel free to change the configuration, use custom plugins, or remove both tools altogether.
The Stale bot is a Github application that automatically marks issues and PRs as stale and closes after a specific duration of inactivity.
Feel free to delete the .github/stale.yml and .github/lock.yml files if you decide not to use the Stale bot.
FAQs
Audit your Lucid models with ease.
The npm package @adogrove/adonis-auditing receives a total of 154 weekly downloads. As such, @adogrove/adonis-auditing popularity was classified as not popular.
We found that @adogrove/adonis-auditing demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.