
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
@forgekit/cli
Advanced tools
ForgeKit is a modular scaffolding tool that helps you spin up full‑stack projects with your choice of frontend, backend and UI frameworks. It creates the initial directory structure, initializes Git and installs required dependencies so you can start coding right away.
Install the package globally and run the CLI:
npm install -g @forgekit/cli
forge
Running forge will prompt you for a project name and desired stack. The
project is created in the directory where you executed the command, and when
scaffolding finishes you will be dropped into a shell inside the new project
folder.
The tool can also be configured programmatically. Example configuration from the project plan:
{
projectName: "acme-site",
frontend: "react-vite",
backend: "express",
ui: "tailwind",
targetDir: "./acme-site"
}
You can also use npx without installing globally:
npx @forgekit/cli
This behaves the same as the global install, prompting for details and placing you in the newly created project directory when finished.
ForgeKit aims to streamline bootstrapping modern JavaScript projects by providing a collection of ready‑to‑use stacks with minimal setup hassle.
FAQs
Modular full-stack project scaffolding tool
The npm package @forgekit/cli receives a total of 2 weekly downloads. As such, @forgekit/cli popularity was classified as not popular.
We found that @forgekit/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.