
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
create-burdy-app
Advanced tools
The easiest way to create a Burdy application.
npm install -g create-burdy-app
create-burdy-app my-app
cd my-app/
npm run dev
Open http://localhost:4000 to view your running app.
When you're ready for production, run npm run build then npm run start.
You don't need to install or setup Webpack or Babel.
They come packaged with burdy, so you can just start coding.
After running create-burdy-app, you're good to go!
Install it once globally:
npm install -g create-burdy-app
To create a new app, run:
create-burdy-app my-app
cd my-app
It will create a directory called my-app inside the current folder.
Inside that directory, it will generate the initial project structure and install necessary dependencies:
.
├── node_modules
├── project
│ ├── admin
│ ├── index.tsx
│ ├── types
│ ├── types.d.ts
│ ├── index.ts
├── docker-compose.yml
├── Dockerfile
├── package.json
├── tsconfig.json
└── [...]
Entry points in Burdy are based on the two files:
project/admin/index.tsx (Admin) is used for adding functionality on UI (React) side of the application.project/index.ts (Server) index.ts is used for adding functionality to server side of application.Out of the box, we get:
Once the installation finishes, you can run some commands in your project:
npm run dev or yarn devRuns the app in the development mode.
Open http://localhost:4000/admin to view it in the browser.
The page will reload if you make edits.
You will also see any errors in the console.
npm run build or yarn buildBuilds the app for production to the .burdy/build folder.
It correctly bundles React in production mode and optimizes the build for the best performance.
npm run start or yarn startStarts the application in production mode. The application should be compiled with `npm run build` first.
Now you're ready to code & deploy your app!
We are grateful to the authors of existing related projects for their ideas as inspiration:
FAQs
Create Burdy apps in one command
We found that create-burdy-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.