
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
create-agentic-app
Advanced tools
Scaffold a new agentic AI application with Next.js, Better Auth, and AI SDK
Scaffold a new agentic AI application with Next.js, Better Auth, and AI SDK.
Create a new project in the current directory:
npx create-agentic-app@latest .
Create a new project in a subdirectory:
npx create-agentic-app@latest my-app
All prompts can be bypassed with CLI flags, enabling fully automated project scaffolding:
# Full non-interactive setup
npx create-agentic-app@latest my-app -y -p pnpm
# Skip install and git init for faster scaffolding
npx create-agentic-app@latest my-app -y -p npm --skip-install --skip-git
| Flag | Short | Description |
|---|---|---|
--yes | -y | Auto-confirm non-empty directory prompt |
--package-manager <manager> | -p | Package manager to use: pnpm, npm, or yarn |
--skip-install | Skip dependency installation | |
--skip-git | Skip git repository initialization |
This starter kit includes:
After creating your project:
.env with your API keys and database credentialsdocker compose up -dpnpm run db:migrate (or npm/yarn)pnpm run devVisit http://localhost:3000 to see your app!
To publish this package to npm:
create-agentic-app/package.jsoncd create-agentic-app
npm link
cd /path/to/test/directory
create-agentic-app my-test-app
cd create-agentic-app
npm publish
The prepublishOnly hook will automatically sync the template from the main project before publishing.This section is for maintainers who need to update the npm package after making changes to the main project.
Follow these steps every time you make changes to the main project and want to publish them:
Edit any files in the main project (outside of create-agentic-app/ folder):
src/ components and pagesdocker-compose.ymlpackage.jsoncd create-agentic-app
This copies all your changes from the main project into the template folder:
npm run sync
What this does:
create-agentic-app/template/template/node_modules, .next, .git, lock files, .env, and the create-agentic-app folder itselfpackage.json (removes private field and sync-template script)Update the version number in create-agentic-app/package.json:
Option A - Using npm version command (recommended):
npm version patch # 1.1.3 → 1.1.4 (bug fixes)
# or
npm version minor # 1.1.3 → 1.2.0 (new features)
# or
npm version major # 1.1.3 → 2.0.0 (breaking changes)
Option B - Manual:
Edit create-agentic-app/package.json and change the version number.
Quick check to make sure your changes are in the package:
npm pack --dry-run | grep "template/"
This shows all files that will be published. Look for your changed files.
npm publish
What happens:
prepublishOnly hook automatically runs npm run sync again (safety check)In a different directory, test that it works:
cd /path/to/test-directory
npx create-agentic-app@latest test-project
# or use the specific version
npx create-agentic-app@1.1.4 test-project
# Complete workflow in 4 commands:
cd create-agentic-app
npm run sync
npm version patch
npm publish
Scenario 1: You edited docker-compose.yml in the main project
cd create-agentic-app
npm run sync # Copies docker-compose.yml to template/
npm version patch # Bumps to next version
npm publish # Publishes to npm
Scenario 2: You added a new component in src/components/
cd create-agentic-app
npm run sync # Copies new component to template/
npm version patch # Bumps version
npm publish # Publishes
Scenario 3: You updated multiple files
cd create-agentic-app
npm run sync # Copies ALL changes to template/
npm version patch # Bumps version
npm publish # Publishes
The sync script excludes these patterns (see scripts/sync-templates.js):
node_modules.next.gitpnpm-lock.yamlpackage-lock.jsonyarn.locktsconfig.tsbuildinfo.envcreate-agentic-app (the folder itself)Issue: npmjs.com shows old version after publishing
npm view create-agentic-app versionnpx even if the website hasn't updatedIssue: Users getting old version with npx
npx clear-npx-cache
npx create-agentic-app@latest my-project
# or use specific version
npx create-agentic-app@1.1.4 my-project
Issue: Forgot to run sync before publishing
prepublishOnly hook runs it automaticallyMIT
FAQs
Scaffold a new agentic AI application with Next.js, Better Auth, and AI SDK
The npm package create-agentic-app receives a total of 22 weekly downloads. As such, create-agentic-app popularity was classified as not popular.
We found that create-agentic-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.