
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@authon/create-app
Advanced tools
Scaffold a new project with Authon authentication pre-configured.
Before using this CLI, create an Authon project and get your API keys:
Create a project at Authon Dashboard
Get your API keys from Project Settings → API Keys
pk_live_...) — use in your frontend codepk_test_...) — for development, enables Dev TeleportConfigure OAuth providers (optional) in Project Settings → OAuth
https://api.authon.dev/v1/auth/oauth/redirectTest vs Live keys: Use
pk_test_...during development. Switch topk_live_...before deploying to production. Test keys use a sandbox environment with no rate limits.
npx @authon/create-app
npx @authon/create-app my-app --template nextjs-app --yes
| Template | Framework | SDK |
|---|---|---|
nextjs-app | Next.js (App Router) | @authon/nextjs |
nextjs-pages | Next.js (Pages Router) | @authon/nextjs |
react-vite | React + Vite | @authon/react |
vue-vite | Vue 3 + Vite | @authon/vue |
nuxt | Nuxt 3 | @authon/nuxt |
svelte | SvelteKit | @authon/svelte |
Each generated project includes:
.env.example with Authon configurationCLAUDE.md for AI agent context-t, --template <template> Use a specific template (skip framework prompt)
-y, --yes Skip prompts and use defaults
-h, --help Show help
-v, --version Show version
FAQs
Create a new project with Authon authentication pre-configured
We found that @authon/create-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.