
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
create-backbone-template
Advanced tools
Create a Backbone starter project: a rigid, spec-driven harness for building with AI coding agents.
Backbone is for vibe coders who want the speed of AI-assisted development without letting the project dissolve into loose conventions. It provides an opinionated full-stack environment where as much of the app as possible is defined before implementation: protobuf contracts, route structure, generated bindings, design-system boundaries, and behavior-focused end-to-end tests.
The goal is not to make the smallest starter kit. The goal is to make a sturdy engineering frame that keeps both humans and agents oriented. Backbone favors declarative surfaces, strict compilation, narrow architectural choices, and repeatable planning rituals so that features are shaped before effective implementation begins.
npm create backbone-template@latest my-app
Equivalent commands:
pnpm create backbone-template my-app
npx create-backbone-template my-app
The generated project contains a React client, Rust ConnectRPC server, shared protobuf definitions, SQLite persistence, generated TypeScript bindings, design-system packages, custom linting boundaries, and Playwright/Cucumber e2e coverage from the first commit.
AI coding agents are surprisingly good at working inside rigid systems. They are much less reliable when the project leaves every architectural choice open. Backbone leans into that: it gives the agent a tight framework, then exposes the important parts of the application as declarative, reviewable artifacts.
Those artifacts become the shared planning surface. A route, a proto service, a Gherkin scenario, or a lint rule is not just implementation detail; it is a piece of the product definition that can be discussed before the code underneath it exists.
This package is the project creator. It copies the template into a new directory, personalizes the project name, restores dotfiles, and leaves the generated project with its own README containing the first setup commands.
Run the creator locally:
node bin/create-backbone-template.js /tmp/my-app
Verify the package:
npm test
npm pack --dry-run
The package is published by the Publish GitHub Actions workflow.
For normal publishing, run the Publish workflow from GitHub Actions and enter
the package version without the leading v. The workflow updates the root
package.json, validates the package and template, commits the version bump,
creates the vX.Y.Z GitHub release, and runs
npm publish --provenance --access public.
For release-based publishing, create and publish a GitHub release tagged
vX.Y.Z. The release workflow verifies the tag matches package.json and runs
npm publish --provenance --access public.
The npm package should be configured for trusted publishing with:
create-backbone-template.github/workflows/publish.ymlFAQs
Create a Backbone spec-driven React and Rust web project.
We found that create-backbone-template demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.