
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
codetentacles-org-cli
Advanced tools
Automated project scaffolding CLI for React, Next.js, and Node.js/TypeScript with best practices
Automated project scaffolding CLI for your organization. Create production-ready Next.js, React, or Node.js/TypeScript projects with best practices, modern tooling, and complete folder structures.
org-nextjs - Next.js Application ScaffoldingScaffold production-ready Next.js applications with App Router, TypeScript, Tailwind CSS, and custom components - built on top of the official create-next-app.
org-react - React Application ScaffoldingScaffold production-ready React applications with Vite, Tailwind CSS, React Router, Redux Toolkit, and best practices.
org-node - Node.js API ScaffoldingScaffold production-ready Node.js/TypeScript REST APIs with Express and your choice of ORM:
npm install -g org-cli
After installation, you'll have access to all three commands:
org-nextjs - For Next.js projectsorg-react - For React projectsorg-node - For Node.js projectsgit clone <your-repo>
cd org-react-cli
npm install
npm link
create-next-app as foundation@/ imports for cleaner codeorg-nextjs
org-nextjs my-app --pm pnpm
| Option | Description | Default |
|---|---|---|
[project-name] | Project directory name | Prompts if not provided |
--pm <manager> | Package manager: npm, pnpm, yarn, bun | npm |
--skip-install | Skip dependency installation | false |
--skip-git | Skip git initialization | false |
my-app/
├── src/
│ ├── app/ # Next.js App Router
│ │ ├── (main)/ # Route group
│ │ │ ├── about/ # About page
│ │ │ └── dashboard/ # Dashboard page
│ │ ├── api/hello/ # API routes
│ │ ├── layout.tsx # Root layout
│ │ ├── page.tsx # Home page
│ │ ├── loading.tsx # Loading UI
│ │ ├── error.tsx # Error UI
│ │ └── not-found.tsx # 404 page
│ ├── components/ # React components
│ │ ├── home/ # Hero, Features
│ │ ├── layout/ # Navbar, Footer
│ │ ├── providers/ # Theme provider
│ │ ├── ui/ # Button, Card
│ │ └── theme-toggle.tsx # Dark mode toggle
│ ├── lib/ # Utilities
│ │ ├── api-client.ts # API client
│ │ └── utils.ts # Helper functions
│ └── hooks/ # Custom hooks
├── tailwind.config.ts
├── next.config.ts
└── package.json
Navigate to project:
cd my-app
Start development:
npm run dev
Open browser: Visit http://localhost:3000
@/ imports for cleaner codeorg-react
org-react my-app --pm pnpm
| Option | Description | Default |
|---|---|---|
[project-name] | Project directory name | Prompts if not provided |
--pm <manager> | Package manager: npm, pnpm, yarn, bun | npm |
--skip-install | Skip dependency installation | false |
--skip-git | Skip git initialization | false |
my-app/
├── src/
│ ├── api/ # API client & endpoints
│ ├── components/ # Reusable components
│ │ ├── common/ # Button, Card, Input
│ │ └── layout/ # Navbar, Footer
│ ├── hooks/ # useFetch, useLocalStorage
│ ├── pages/ # Home, Dashboard, Profile
│ ├── redux/ # Store & slices
│ ├── routes/ # Route definitions
│ ├── services/ # Business logic
│ └── utils/ # Helper functions
├── tailwind.config.js
├── vite.config.js
└── package.json
✨ Multiple ORM Support
📦 Best Practices Built-in
🛠️ Developer Experience
org-node
You'll be prompted for:
# MongoDB
org-node my-api --mongodb
# PostgreSQL with Sequelize
org-node my-api --sequelize
# Prisma with PostgreSQL
org-node my-api --prisma
| Flag | Description | Default |
|---|---|---|
--mongodb | Use MongoDB with Mongoose | - |
--sequelize | Use Sequelize ORM | - |
--prisma | Use Prisma ORM | - |
--pm <manager> | Package manager: npm|pnpm|yarn|bun | npm |
--skip-install | Skip installing dependencies | false |
--skip-git | Skip git initialization | false |
# Create MongoDB project with pnpm
org-node blog-api --mongodb --pm pnpm
# Create Prisma project, skip install
org-node shop-api --prisma --skip-install
# Create Sequelize project
org-node user-service --sequelize
my-api/
├── src/
│ ├── config/ # env.config.ts, db.config.ts
│ ├── controllers/ # Route controllers
│ ├── middleware/ # Error, validation, auth
│ ├── models/ # Database models (ORM-specific)
│ ├── routes/ # API routes
│ ├── services/ # Business logic
│ ├── utils/ # ApiError, ApiResponse
│ ├── validation/ # Joi schemas
│ └── index.ts # App entry point
├── .env.example
├── tsconfig.json
├── nodemon.json
└── package.json
POST /api/users/register - Register new userPOST /api/users/login - Login user (returns JWT)GET /api/users - Get all usersGET /api/users/:id - Get user by IDPUT /api/users/:id - Update userDELETE /api/users/:id - Delete userGET /api/health - Server statusNavigate to project:
cd my-api
Configure environment:
cp .env.example .env
# Edit .env with your database credentials
For Prisma only:
npx prisma generate
npx prisma migrate dev --name init
Start development:
npm run dev
org-nextjs my-nextjs-app --pm pnpm
cd my-nextjs-app
npm run dev
# Open http://localhost:3000
org-react my-dashboard --pm pnpm
cd my-dashboard
npm run dev
org-node my-api --mongodb --pm pnpm
cd my-api
cp .env.example .env
# Configure MongoDB URI in .env
npm run dev
org-node my-api --prisma
cd my-api
cp .env.example .env
# Configure DATABASE_URL in .env
npx prisma generate
npx prisma migrate dev --name init
npm run dev
MIT
Contributions are welcome! Please feel free to submit a Pull Request.
Made with ❤️ for rapid development
FAQs
Automated project scaffolding CLI for React, Next.js, and Node.js/TypeScript with best practices
We found that codetentacles-org-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.