
Product
Introducing Tier 1 Reachability: Precision CVE Triage for Enterprise Teams
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
@codecompose/mono-ts
Advanced tools
This is a personal quest for the perfect Typescript monorepo setup.
There is an accompanying article "My quest for the perfect TS monorepo" that you might want to read for context.
It is the best I could come up with given the tooling that is available, so expect this repository to change over time as the ecosystem around Typescript evolves.
My current projects are based on Node.js, Next.js, and Firebase, so that is what I am focussing on primarily. If you use different a different stack, I believe this can still be a great reference, as the approach itself does not depend on it.
Contributions and suggestions are welcome within the scope of this example, but I doubt there ever will be a one-size-fits-all solution, so this code should be viewed as opinionated.
I ended up basing a lot of things on the Turborepo starter, and I recommend reading their monorepo handbook.
.d.ts.map
filesIn the main branch of this repo, packages are managed with PNPM.
There is also a branch for NPM
Originally, I included branches for Yarn classic (v1), and modern (v4), but I stopped updating them as Yarn is not that commonly used anymore.
I recommend using pnpm
over npm
or yarn
. Apart from being fast and
efficient, PNPM has better support for monorepos.
You can install PNPM with corepack
which is part of modern Node.js versions:
corepack enable
(if you have not used it before)corepack prepare pnpm@latest --activate
Then run pnpm install
from the repository root.
To get started, execute the following 3 scripts with pnpm [script name]
from
the root of the monorepo:
Script | Description |
---|---|
watch | Continuously builds everything using the Turborepo watch task, except for the web app which has its own dev server |
emulate | Starts the Firebase emulators. |
dev | Starts the Next.js dev server to build the app on request. |
The web app should become available on http://localhost:3000 and the emulators UI on http://localhost:4000.
You should now have a working local setup, in which code changes to any package are picked up.
There is an accompanying article "My quest for the perfect TS monorepo" that you might want to read for context.
This monorepo used to showcase the "internal packages approach" for
@repo/common
, as described in the article, which lets you link to sources
directly without a build step.
I removed it because I ran into some issues, and I can not really recommend it. With the right configuration of incremental builds, references, and build orchestration, modern build tools seem to work fast and smoothly enough.
Often in a monorepo, you will never publish the shared packages to NPM or some other registry, and because of that, the namespace you use to prefix your package names does not matter. You might as well pick a standard one that you can use in every project.
At first I used @mono
, and later I switched to @repo
when I encountered that
in the Turborepo examples. I like both, because they are equally short and
clear, but I went with @repo
because I expect it might become a standard
sooner.
A standard name for a package that is only shared between client-side apps is
ui
. Besides sharing UI components, I also use it to share other things that
are solely relevant to the clients.
In their documentation for monorepos, Firebase recommends putting all configurations in the root of the monorepo. This makes it possible to deploy all packages at once, and easily start the emulators shared between all packages.
Throughout this repository, we use a Firebase demo project called demo-mono-ts
A demo project allows you to run emulators for the different components like
database without creating a Firebase projects with resources. To make this work
you pass the --project
flag when starting the emulator, and you need to use a
name that starts with demo-
.
When passing configuration to initializeApp you can use any non-empty string for the API keys as you can see in apps/web/.env.development.
Firebase does not natively support monorepos where packages used shared code from other packages. The Firebase deploy pipeline wants to upload a self-contained package that can be treated similarly to an NPM package, so that it can run an install and execute the main entry from the manifest.
To support shared packages, this repo uses firestore-tools-with-isolate, which is a firebase-tools fork I created to integrate isolate-package. I wrote an article explaining what it does and why it is needed.
This demo can be run using only the emulators, but if you would like to see the
deployment to Firebase working you can simply execute
npx firebase deploy --project your-project-name
the root of the monorepo.
You might notice @google-cloud/functions-framework
as a dependency in the
service package even though it is not being used in code imports. It is
currently required for Firebase to be able to deploy a PNPM workspace. Without
it you will get an error asking you to install the dependency. I don't quite
understand how the two are related, but it works.
With the firebase config in the root of the monorepo, you can configure and
start the emulators for all packages at once with pnpm emulate
.
I have stored these in .env
files in the respective service packages. Normally
you would want to store them in a file that is not part of the repository like
.env.local
but by placing them in .env
I prevent having to give instructions
for setting them up just for running the demo.
The api service uses a secret for DEMO_API_KEY. To make secrets work with the
emulator you currently have to add the secret to .secret.local
and also a
.env
or .env.local
file. See
this issue for more
info. I have placed it in .env
which is part of the repo, so you don't have to
set anything up, but .env.local is the proper location probably because that
file is not checked into git.
This repo uses @typed-firestore/react and @typed-firestore/server to provide typed Firestore abstractions for both React and Node.js.
If you're interested here is an in-depth article of how they came about.
FAQs
A quest for the ideal TS monorepo setup
We found that @codecompose/mono-ts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.