
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@systemlabs/foundation-cli
Advanced tools
Foundation CLI — scaffold and configure full-stack applications with modular architecture.
Scaffold production-ready full-stack projects in under 3 minutes.
npx @systemlabs/foundation-cli create my-app
Foundation CLI is a dependency-aware project assembler. You describe your intent — "I want a SaaS with Next.js, Express, PostgreSQL, and JWT auth" — and the engine resolves the full dependency graph, merges configurations without conflicts, injects integration code, and produces a working project.
It is NOT:
create-next-app or degit)# One-shot, no install needed
npx @systemlabs/foundation-cli
# Or install globally
npm install -g @systemlabs/foundation-cli
foundation create my-app
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
FOUNDATION CLI · Build your architecture in minutes
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
? Project name › my-saas-app
? What are you building?
❯ SaaS Application
AI Application
E-commerce
API Backend
Internal Tool
? Frontend framework › Next.js
? Backend › Express
? Database › PostgreSQL
? ORM › Prisma
? Auth › JWT
? UI system › Tailwind + ShadCN
? Deployment › Docker
✔ Files staged (47 files)
✔ npm packages installed
🎉 my-saas-app is ready. cd my-saas-app && npm run dev
foundation create [project-name] # interactive
foundation new [project-name] # alias
foundation create my-app --preset saas # non-interactive / CI mode
Available presets: saas, ai-app, ecommerce, api-backend, internal-tool
foundation add orm-prisma # add a built-in module
foundation add stripe # add an official add-on
foundation add foundation-plugin-redis # add a community plugin
foundation switch orm prisma # swap the active ORM
foundation switch backend nestjs # swap the active backend
foundation switch database mongodb # swap the active database
foundation search <query> # search the plugin registry on npm
foundation generate model Post # interactive field prompts → ORM schema
foundation generate crud Post # model + service + controller + routes
foundation generate --list # list all available generators
foundation info # stack summary, modules, ORM, plugins
foundation doctor # health checks: Node version, env vars, compatibility
foundation validate # validate project.lock and foundation.config.json
foundation dev # delegates to npm run dev
foundation test # delegates to npm run test
foundation db migrate # npm run db:migrate / alembic upgrade head
foundation db seed # npm run db:seed
foundation db reset # npm run db:reset
foundation db studio # Prisma Studio (Prisma only)
foundation db push # Prisma db push (Prisma only)
foundation eject [module-id] # copy module files into your project
foundation upgrade [--dry-run] # upgrade modules via the lockfile
foundation create-plugin [name] # scaffold a new plugin package
foundation ai "create a blog with posts, comments, and JWT auth"
Requires ANTHROPIC_API_KEY or OPENAI_API_KEY in your environment. The CLI sends your prompt to the model with the full module catalogue, receives a structured plan, and runs foundation add + foundation generate automatically.
Next.js · React + Vite · Vue 3 · Svelte
Express · NestJS · FastAPI · Django
PostgreSQL · MySQL · MongoDB · SQLite · Supabase
Prisma · TypeORM · Mongoose · SQLAlchemy
JWT · OAuth (Google + GitHub) · Session · Clerk · Auth0
Tailwind CSS · ShadCN/UI · Material UI · Chakra UI · Bootstrap
Zustand · Redux Toolkit · TanStack Query
Docker · Vercel · Render · AWS ECS
Stripe · Redis · OpenAI
Every project generation runs through a four-stage pipeline:
FileTransaction, runs 14 lifecycle hooks, installs packagesAll file writes are staged to a temp directory and committed atomically. Any failure rolls back completely — no partial scaffolds.
After generation, your project contains:
.foundation/
├── project.lock ← exact module + CLI versions (read by upgrade, switch, info, doctor)
└── foundation.config.json ← user selections + installed plugins (read by add, switch, generate, eject)
| Package | Description |
|---|---|
@systemlabs/foundation-cli | ← you are here — user-facing CLI |
@systemlabs/foundation-core | Engine: dependency resolver, composition planner, file transaction |
@systemlabs/foundation-modules | All built-in modules (frontend, backend, database, auth, …) |
@systemlabs/foundation-plugin-sdk | Plugin contract, types, manifest schema |
@systemlabs/foundation-testing | Test utilities for module and plugin authors |
MIT — see LICENSE
FAQs
Foundation CLI — scaffold and configure full-stack applications with modular architecture.
The npm package @systemlabs/foundation-cli receives a total of 5 weekly downloads. As such, @systemlabs/foundation-cli popularity was classified as not popular.
We found that @systemlabs/foundation-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.