
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@blockcraft/create-ic-app
Advanced tools
Create Internet Computer applications with no build configuration - just like create-react-app but for IC
Make IC development as easy as React development 🚀
Create Internet Computer applications with zero configuration - just like create-react-app but for the IC ecosystem.
npx @blockcraft/create-ic-app my-awesome-app
cd my-awesome-app
./deploy.sh
That's it! You now have a working IC app with React frontend and Motoko backend. ✨
The Problem: Setting up an IC project from scratch is complex - you need to configure dfx.json, set up React with TypeScript, configure environment variables, create deployment scripts, and more.
The Solution: One command that gives you everything you need to start building on the Internet Computer.
Before (Manual Setup):
# 😰 Manual setup takes 30+ minutes
mkdir my-app && cd my-app
dfx new backend --type=motoko
npm create vite@latest frontend -- --template react-ts
# ... configure dfx.json
# ... set up environment variables
# ... create deployment scripts
# ... configure build pipeline
# ... and much more configuration
After (With Create IC App):
# 🎉 Zero-config setup in 30 seconds
npx @blockcraft/create-ic-app my-app
cd my-app
./deploy.sh
# Interactive mode - prompts for project name
npx @blockcraft/create-ic-app
# Direct mode - specify project name
npx @blockcraft/create-ic-app my-ic-app
# Navigate and deploy
cd my-ic-app
./deploy.sh
Every project created includes:
✅ Internet Computer Backend
✅ React Frontend
✅ Development Tools
./deploy.sh)./deploy-ic.sh)✅ Zero Configuration
npx @blockcraft/create-ic-app my-first-dapp
# Create app in specific directory
npx @blockcraft/create-ic-app ./projects/my-dapp
# Create app with specific name
npx @blockcraft/create-ic-app "my-awesome-web3-app"
my-ic-app/
├── src/
│ ├── frontend/ # React TypeScript app
│ │ ├── App.tsx
│ │ ├── main.tsx
│ │ └── ...
│ └── backend/ # Motoko canister
│ └── main.mo
├── deploy.sh # Local deployment
├── deploy-ic.sh # Mainnet deployment
├── dfx.json # DFX configuration
├── package.json # Dependencies
├── .env # Environment variables
├── .env.example # Environment template
└── README.md # Project documentation
# 1. Create your app
npx @blockcraft/create-ic-app my-app
cd my-app
# 2. Start local development
./deploy.sh
# 3. Make changes to your code
# Edit src/frontend/ or src/backend/
# 4. Redeploy locally
./deploy.sh
# 5. Deploy to mainnet when ready
./deploy-ic.sh
./deploy.sh
./deploy-ic.sh
| Feature | Manual Setup | Create IC App |
|---|---|---|
| Time to start | 30+ minutes | 30 seconds |
| Configuration | Complex | Zero config |
| Best practices | Manual research | Built-in |
| Deployment | Manual scripts | Ready scripts |
| Documentation | You write it | Included |
| Updates | Manual | Template updates |
We welcome contributions! Here's how to help:
# Clone the repository
git clone https://github.com/LevanIlashvili/create-ic-app.git
cd create-ic-app
# Install dependencies
npm install
# Test locally
npm link
create-ic-app test-app
The template is in the template/ directory. Update it with:
MIT License - see LICENSE file for details.
Start building on the Internet Computer today! 🎯
npx @blockcraft/create-ic-app my-next-big-idea
FAQs
Create Internet Computer applications with no build configuration - just like create-react-app but for IC
We found that @blockcraft/create-ic-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.