
Security News
Deno 2.6 + Socket: Supply Chain Defense In Your CLI
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.
create-flex-plugin
Advanced tools
Command-line tool to create, develop and build a new Twilio Flex Plugin.
There is a variety of ways to use/install. The quickest way is:
npm init flex-plugin plugin-demo
cd plugin-demo
npm start
npmnpm:# Via npm init
npm init flex-plugin plugin-demo
# Via npx
npx create-flex-plugin plugin-demo
# Install globally
npm install -g create-flex-plugin
create-flex-plugin plugin-demo
yarn:# Via npm init
npm init flex-plugin plugin-demo --yarn
# Via npx
npx create-flex-plugin plugin-demo --yarn
# Install globally
npm install -g create-flex-plugin
create-flex-plugin plugin-demo --yarn
Note: Support for yarn only exists for @twilio/flex-ui > 1.18.0. If you are upgrading from an older version of the plugin-builder, you'll need to add add react-emotion and pin it to 9.2.6.
create-flex-plugin <name>
Creates a new Twilio Flex Plugin project
Arguments:
name Name of your plugin. Needs to start with `plugin-`
Options:
--accountSid, -a The Account SID for your Flex Project
--runtimeUrl, -r The URL to your Twilio Flex Runtime
--template, -t A GitHub URL that contains your template
--typescript, -s Create a typescript project
--install Auto-install dependencies [boolean] [default: false]
--yarn, -y Use yarn
-h, --help Show help [boolean] [default: false]
-v, --version Show version number [boolean] [default: false]
When creating a new plugin, you may provide a --template URL to a GitHub repo containing the source code of a Flex plugin. Create Flex Plugin will copy over the entire content from the directory, including all scripts, files and directories that are not part of the src folder. The repo has to be a valid node repository which means that it expects files such as package.json, .gitignore, README.md, etc to be present.
Your GitHub project should be
/
src/
index.js
...
...
Create Flex Plugin will copy over the content from the directory, and expects an index.js in the src folder. We will also provide a public/ folder and a package.json but you may override these by including them in your base GitHub repo.
See flex-plugin-template-sample for a basic example and plugin-agent-autoresponse for a more complete example.
The --template link can contain a reference, which can be a tag or a branch name. For example
create-flex-plugin <plugin-name> --template https://github.com/ktalebian/flex-plugin-template-sample/tree/1.0.0
would use the tagged version 1.0.0, while
create-flex-plugin <plugin-name> --template https://github.com/ktalebian/flex-plugin-template-sample/tree/master
would use the master branch.
Make sure to follow the instructions in the main repository to set up the project.
# Install dependencies and link local packages with each other
cd packages/create-flex-plugin
npx lerna bootstrap
# Run tests
npm test
# To execute your local version the CLI
npm link
create-flex-plugin --help
Thank you to all the lovely contributors to this project. Please check the main repository to see all contributors.
FAQs
Toolkit to create a new Twilio Flex plugin
The npm package create-flex-plugin receives a total of 218 weekly downloads. As such, create-flex-plugin popularity was classified as not popular.
We found that create-flex-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.

Security News
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.