
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
ai-forge-cli
Advanced tools
TypeScript stack scaffolding & enforcement CLI for TanStack Start + Convex
TypeScript stack scaffolding & enforcement CLI for TanStack Start + Convex + Tailwind.
The key insight: Claude Code reads CLAUDE.md automatically. Forge uses this as a hook — imperative instructions that tell Claude it MUST use the forge CLI commands. No more AI drift.
npm install -g forge-cli
Or use with npx:
npx forge-cli init my-app
forge init <project-name>Creates a complete project with:
forge init my-app
cd my-app
pnpm install
npx convex dev --once --configure=new
pnpm dlx shadcn@latest init
pnpm dev
forge add:feature <name>Creates a full vertical slice:
convex/features/<name>/
├── schema.ts # Table definition (exports <name>Tables)
├── queries.ts # All queries
├── mutations.ts # All mutations
└── index.ts # Barrel export
src/features/<name>/
├── components/
│ └── index.ts # Component exports
├── hooks.ts # Feature hooks
└── index.ts # Barrel export
app/routes/<name>/
├── index.tsx # List view
└── $id.tsx # Detail view
Also auto-registers the schema in convex/schema.ts.
forge add:feature projects
# Output:
✓ Created convex/features/projects/schema.ts
✓ Created convex/features/projects/queries.ts
✓ Created convex/features/projects/mutations.ts
✓ Created convex/features/projects/index.ts
✓ Created src/features/projects/components/index.ts
✓ Created src/features/projects/hooks.ts
✓ Created src/features/projects/index.ts
✓ Created app/routes/projects/index.tsx
✓ Created app/routes/projects/$id.tsx
✓ Updated convex/schema.ts
forge checkValidates project structure. Fails if rules are broken. Use in CI/pre-commit.
forge check
# Output:
✓ Feature structure valid
✓ Component locations valid
✓ Hook locations valid
✓ Thin routes valid
✓ Cross-feature imports valid
✓ Feature parity valid
All checks passed!
src/features/*/components/ or src/components/src/features/*/hooks.ts or src/hooks/src/features/X/ cannot import from src/features/Y/src/features/X has matching convex/features/XWhen you run forge init, it generates a CLAUDE.md file that instructs Claude Code to:
forge add:feature <name> before building any featureforge check before completing any taskThis eliminates AI drift and enforces consistent architecture.
# From generated CLAUDE.md
## YOU MUST USE FORGE CLI
When the user asks you to build ANY feature, you MUST:
1. FIRST run `forge add:feature <name>`
2. THEN fill in the generated files
3. NEVER create feature files manually
app/routes/ → Thin route files (import from features, no logic)
src/features/ → All feature code (components, hooks, types)
src/components/ → Shared UI only (used across features)
src/lib/ → Pure utilities
convex/features/ → Backend mirrors frontend features
MIT
FAQs
TypeScript stack scaffolding & enforcement CLI for TanStack Start + Convex
We found that ai-forge-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.