Big News: Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development.Announcement
Sign In

@vendure-platform/create

Package Overview
Dependencies
Maintainers
2
Versions
10
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@vendure-platform/create

CLI tool to scaffold a Vendure demo project with Vendure Platform plugins

latest
Source
npmnpm
Version
0.2.3
Version published
Weekly downloads
33
-95.61%
Maintainers
2
Weekly downloads
 
Created
Source

@vendure-platform/create

Scaffold a Vendure Platform project with selected plugins, Docker infrastructure, demo data, and an optional Next.js storefront.

Usage

npx @vendure-platform/create my-project

This starts an interactive setup. For non-interactive usage, provide both --plugins and --company:

npx @vendure-platform/create my-project \
  --company "Acme Corp" \
  --plugins approval-workflows,price-rules \
  --no-storefront

CLI Flags

FlagDescriptionDefault
--plugins <list>Comma-separated optional plugin keys(interactive prompt)
--company <name>Company name for branding(derived from project name)
--registry-token <token>Vendure private-registry npm auth token (baked into .npmrc)(interactive prompt)
--license-token <token>Vendure Platform server-side license token (written to .env)(interactive prompt)
--no-storefrontSkip the Next.js storefrontincluded
--githubCreate a private GitHub repo via gh CLIno
--github-org <org>GitHub organization for the repo (only used with --github)vendurehq
--no-installSkip npm install after scaffoldingruns install
--no-gitSkip git initinits git
--dry-runPrint what would be created without writing filesoff

When --plugins and --company are both provided, the CLI runs in non-interactive mode.

Tokens: registry vs license

The Vendure Enterprise Portal issues two distinct tokens with different purposes — keep them straight:

  • Registry token — npm auth token for the private registry. Lets ${pm} install download @vendure-platform/* packages. The CLI writes it into the project .npmrc as _authToken. .npmrc is gitignored.
  • License token — checked at server boot by the License Guard plugin. The CLI writes it into .env as VENDURE_PLATFORM_LICENSE_TOKEN.

They are not interchangeable. Pass each via its dedicated flag (--registry-token, --license-token) or paste each at its own interactive prompt. Either can be skipped (blank input) if you want to add it later.

Plugin Tiers

Plugins fall into three tiers (mirroring @vendure-platform/plugin-meta):

  • Core — always active, can't be disabled. Hidden from the interactive prompt.
  • Optional — active by default. Pre-ticked in the prompt; deselect to emit <key>: false in the generated vendure-config.ts.
  • Requires config — inactive by default. Pick from the prompt to enable; the generated config carries the env-var-driven options block.
KeyPluginCategoryTier
license-guardLicense Guardplatformcore-requires-config
org-hierarchyOrg Hierarchyb2bcore
advanced-searchAdvanced Searchsearchcore
workflow-engineWorkflow Engineplatformcore
approval-workflowsApproval Workflowsb2boptional
global-searchGlobal Searchsearchoptional
entity-access-controlEntity Access Controlb2boptional
tax-id-managementTax ID Managementb2boptional
shopping-listShopping Listcommerceoptional
quick-orderQuick Ordercommerceoptional
reorder-from-historyReorder from Historycommerceoptional
store-creditStore Credit / Gift Cardscommerceoptional
quote-managementQuote Managementb2boptional
price-rulesPrice Rulescommerceoptional
packaging-unitsPackaging Unitscommerceoptional
content-versioningContent Versioningplatformoptional
configuratorConfiguratorcommerceoptional
ssoSSOplatformrequires-config
audit-trailAudit Trailplatformrequires-config

The canonical list lives in libs/plugin-meta/src/index.ts; this table mirrors it.

Dependencies

Inter-plugin dependencies are resolved by VendurePlatform.init() at runtime — not by the scaffolder. Selecting approval-workflows will activate org-hierarchy and workflow-engine automatically (they're core anyway). Selecting global-search will activate advanced-search (also core). Integration sub-plugins between active pairs are wired automatically.

After Scaffolding

cd my-project
docker compose up -d
npm run populate
npm run dev

See the Quick Start guide for the full walkthrough.

FAQs

Package last updated on 27 May 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts