
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
create-holoscript-plugin
Advanced tools
Scaffold HoloScript domain plugins following the multi-repo architecture pattern
Scaffold HoloScript domain plugins following the multi-repo architecture pattern.
# Create a new plugin (interactive prompts)
npx create-holoscript-plugin
# Create with name
npx create-holoscript-plugin my-plugin
# Create scoped plugin
npx create-holoscript-plugin @holoscript/robotics-plugin
holoscript-my-plugin/
├── src/
│ ├── index.ts # Main exports
│ └── types.ts # TypeScript types
├── python/ # Python bridge (optional)
│ └── bridge.py # JSON-RPC server
├── tests/ # Integration tests (optional)
│ └── integration.test.ts
├── docs/
│ └── api-reference.md # API documentation template
├── package.json # npm package config
├── tsconfig.json # TypeScript config
├── jest.config.js # Jest test config
├── .gitignore
├── LICENSE # MIT license
└── README.md # Usage guide
✅ Multi-Repo Pattern: Follows validated HoloScript plugin architecture
✅ TypeScript First: Full type safety with holoscript@^3.1.0 peer dependency
✅ Python Bridge: Optional JSON-RPC bridge for external SDKs
✅ Unity Target: Optional Unity C# code generation (coming soon)
✅ Test Ready: Jest integration tests with 80%+ coverage target
✅ Domain Templates: Pre-configured for scientific, robotics, medical, AI/ML, game engines
✅ npm Ready: Package.json configured for publishing to npm
Choose from pre-configured domain templates:
| Domain | Use Cases | Example Plugins |
|---|---|---|
| Scientific Computing | Drug discovery, molecular dynamics, quantum chemistry | @holoscript/narupa-plugin |
| Robotics | ROS2, Gazebo, URDF, digital twins | @holoscript/robotics-plugin |
| Medical | DICOM, surgical sims, vitals monitoring | @holoscript/medical-plugin |
| Game Engine | Unreal, advanced Unity features | @holoscript/unreal-plugin |
| AI/ML | AlphaFold, diffusion models, neural nets | @holoscript/alphafold-plugin |
| Custom | Your own domain | @yourcompany/custom-plugin |
The CLI will guide you through:
@holoscript/my-plugin (scoped recommended)All generated plugins follow the Core + Plugins + Tooling pattern:
HoloScript Core (canonical trait definitions)
│
├─> @holoscript/my-plugin (domain implementation)
│ └─> Uses: HoloScript traits as TypeScript constants
│ └─> Provides: Domain-specific functionality (Python bridge, Unity C#, etc.)
│
└─> TrainingMonkey (AI training data - optional)
└─> Uses: HoloScript traits for synthetic data generation
Key Principles:
See Multi-Repo Plugin Architecture Pattern for full details.
npx create-holoscript-plugin @holoscript/robotics-plugin
Prompts:
ROS2 and Gazebo integration for HoloScriptRobotics (ROS2, Gazebo, URDF)Your NameYes (for ROS2 integration)Yes (for VR robot programming)YesGenerated Plugin:
// src/index.ts (after your implementation)
import { ROS2Bridge } from './ros2-bridge';
import { GazeboTarget } from './gazebo-target';
export { ROS2Bridge, GazeboTarget };
export const VERSION = '1.0.0';
export default {
ROS2Bridge,
GazeboTarget,
VERSION,
};
Usage:
import { ROS2Bridge } from '@holoscript/robotics-plugin';
const bridge = new ROS2Bridge();
await bridge.connect('ws://localhost:9090');
After generating a plugin:
cd holoscript-my-plugin
# Install dependencies
npm install
# Development mode (watch)
npm run dev
# Build
npm run build
# Run tests
npm test
# Lint
npm run lint
# Format code
npm run format
# Build production version
npm run build
# Publish (requires npm account)
npm publish --access public
See existing HoloScript plugins for reference:
A: No! Plugins are separate npm packages with holoscript@^3.1.0 as a peer dependency. This keeps the core lightweight and enables independent versioning.
A: Yes! All generated code is MIT licensed. You own your plugin.
A: Plugins use peer dependencies, so they work with compatible HoloScript versions (e.g., ^3.1.0 works with 3.1.x and 3.2.x). Update your plugin's peer dependency when breaking changes occur.
A: No, this is an npm-based tool. Use npx (comes with npm) to run without installing globally.
Contributions welcome! To improve the generator:
prompts choices)MIT © HoloScript Contributors
Generated plugins inherit the same MIT license. You own your plugins!
Pattern: Multi-Repo Plugin Architecture
FAQs
Scaffold HoloScript domain plugins following the multi-repo architecture pattern
We found that create-holoscript-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.