
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
@forgekit/cli
Advanced tools
ForgeKit is a modular scaffolding tool that helps you spin up full‑stack projects with your choice of frontend, backend and UI frameworks. It creates the initial directory structure, initializes Git and installs required dependencies so you can start coding right away.
Install the package globally and run the CLI:
npm install -g @forgekit/cli
forge
Running forge will prompt you step‑by‑step for a frontend, UI library, backend
and optional database. Choices are filtered so only compatible combinations are
shown. The project is created in the directory where you executed the command
and when scaffolding finishes you will be dropped into a shell inside the new
project folder.
The tool can also be configured programmatically. Example configuration from the project plan:
{
projectName: "acme-site",
frontend: "react-vite",
backend: "express",
ui: "tailwind",
targetDir: "./acme-site"
}
You can also use npx without installing globally:
npx @forgekit/cli
This behaves the same as the global install, prompting for details and placing you in the newly created project directory when finished.
If the forge command is not found after a global install, ensure your npm
global bin directory is in your PATH.
You can typically add it with:
$env:Path += ";$(npm bin -g)"
You can verify your environment at any time with the built in doctor command:
forge --doctor
forge deployRun this command to publish your project. It will:
bundle.tar.gz (defaults to dist/, overridable with --build-dir).If a forgekit.json file exists it will be used to auto-detect the build directory based on the scaffolded stack.
The deploy endpoint can be customized with the FORGEKIT_DEPLOY_URL environment variable.
Example:
forge deploy --build-dir .next
ForgeKit aims to streamline bootstrapping modern JavaScript projects by providing a collection of ready‑to‑use stacks with minimal setup hassle.
Run tests with:
npm test
To update the stack documentation after modifying the available options run:
npm run generate-stack-docs
This will regenerate STACKS.md based on the registry files.
There is currently no formal CONTRIBUTING guide, but pull requests and issues are welcome.
FAQs
Modular full-stack project scaffolding tool
The npm package @forgekit/cli receives a total of 2 weekly downloads. As such, @forgekit/cli popularity was classified as not popular.
We found that @forgekit/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.