
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
create-fullstack-kit
Advanced tools
Generate a production-ready full-stack monorepo starter kit (pnpm only)
A production-ready CLI tool to generate full-stack monorepo starter kits in under 5 minutes.
This CLI officially supports pnpm ONLY.
❌ npm is NOT supported (will cause workspace:* errors)
❌ yarn is NOT supported
✅ pnpm is REQUIRED
This monorepo uses workspace:* dependencies and pnpm-specific features. Using npm or yarn will break the build.
1. Install pnpm (if not already installed):
npm install -g pnpm
2. Create your project:
pnpm create fullstack-kit myapp
Or use interactive mode:
pnpm create fullstack-kit
myapp/
├── apps/
│ ├── web/ # Next.js App Router + Tailwind + shadcn/ui
│ └── api/ # NestJS OR Express backend
├── packages/
│ ├── ui/ # Shared shadcn components
│ ├── auth/ # Shared OAuth + JWT logic
│ ├── eslint-config/
│ └── tsconfig/
├── .env.example
├── package.json
├── turbo.json
├── pnpm-workspace.yaml
└── README.md
--frontend <type> - Frontend framework (default: next)--ui <type> - UI library (default: shadcn)--backend <type> - Backend framework (nest | express, default: nest)--auth <type> - Authentication (default: oauth)--db <type> - Database ORM (default: prisma)npm install -g pnpmCause: You're using npm or npx instead of pnpm.
Fix:
npm install -g pnpm
pnpm create fullstack-kit
url is no longer supported"Cause: Prisma v7 breaking change.
Fix: This CLI uses Prisma v6.19.0 to avoid this issue. If you upgrade Prisma manually, stay on v6.x.
If you see this message, it's normal. The app works with JWT sessions (no database). Add DATABASE_URL to .env when you're ready to use a database.
If you see this message, it's normal. OAuth will work in demo mode. Add GOOGLE_CLIENT_ID/GITHUB_CLIENT_ID to .env to enable real OAuth.
# Install dependencies
pnpm install
# Build
pnpm build
# Run in development
pnpm dev
You're warmly welcome to contribute to create-fullstack-kit!
If you'd like to improve the tool, fix bugs, or add new features, feel free to open a Pull Request on GitHub:
🔗 https://github.com/cadmostafijur/create-fullstack-kit-CLI
If you discover any issues or have suggestions, you can open an issue, submit a PR directly, or reach out for discussion. Contributions of all sizes—code, documentation, or ideas—are highly appreciated.
Let's build a better full-stack developer experience together! 🚀
MIT
FAQs
Generate a production-ready full-stack monorepo starter kit (pnpm only)
We found that create-fullstack-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.