
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
create-kickstart
Advanced tools
Scaffold production-ready fullstack, backend, mobile projects. React + FastAPI/Express/Go/Spring Boot. Docker, CI/CD, Terraform, Grafana, auth, CRUD, AI context (CLAUDE.md, .cursorrules). One command.
Scaffold production-ready fullstack, backend, mobile, and CLI projects in seconds. One command. Any stack. AI-friendly.
npx create-kickstart
Starting a new project shouldn't take hours. Every time you start a POC or greenfield project, you repeat the same setup: Docker, CI/CD, linting, testing, env management, database configs, deployment. create-kickstart does all of it in one command.
| Feature | create-kickstart | create-next-app | cookiecutter | yeoman |
|---|---|---|---|---|
| Multi-stack (React + FastAPI) | Yes | No | No | No |
| Add services to existing project | Yes | No | No | No |
| Switch deploy providers | Yes | No | No | No |
| AI context files (CLAUDE.md, .cursorrules) | Yes | No | No | No |
| Observability (Grafana + OTel) | Yes | No | No | No |
| 8 deploy providers + Terraform | Yes | No | No | No |
| Analytics SDK (PostHog, Segment) | Yes | No | No | No |
| GraphQL + gRPC scaffold | Yes | No | No | No |
| Mobile (React Native, Flutter) | Yes | No | No | No |
# Interactive — walks you through every choice
npx create-kickstart
# One-liner — for AI agents and scripts
npx create-kickstart my-app \
--type fullstack \
--frontend react-vite \
--backend fastapi \
--with docker,ci,lint,test,env,db,ai-context \
--database postgres \
--no-interactive
Next.js | React + Vite | Vue 3 | SvelteKit | Angular
FastAPI (Python) | Express (TypeScript) | Hono | Django | Go Chi | Spring Boot (Java)
React Native | Flutter | Swift (iOS) | Kotlin (Android)
PostgreSQL | MySQL | SQLite | MongoDB
Pick what you need — mix and match:
| Enhancement | What it does |
|---|---|
docker | Dockerfile + docker-compose for all services |
ci | GitHub Actions CI workflow |
lint | ESLint/Prettier, Ruff, golangci-lint |
test | Test runner config + example tests |
env | .env management with .env.example |
db | Database configs (Postgres, MySQL, SQLite, MongoDB) |
ai-context | CLAUDE.md, .cursorrules, copilot.md, AI_CONTEXT.md |
auth | JWT authentication (login/register) |
sample-crud | Working /items CRUD API + frontend component |
api-wiring | CORS + proxy + typed API client (fullstack) |
doctor | Dev environment prerequisite checker |
logging | Structured logging (pino, structlog, zerolog) |
observability | OpenTelemetry + Grafana + Prometheus + Tempo + Loki |
analytics | PostHog, CleverTap, MoEngage, Mixpanel, Segment |
api-protocol | GraphQL (client-facing) + gRPC (internal) |
deploy | Deploy configs for 8 platforms |
deps-auto | Dependabot automation |
pre-commit | Pre-commit hooks |
Add backend services in any language to your existing project:
cd my-app
npx create-kickstart add payment-svc --backend express --with db,test
npx create-kickstart add notifications --backend go-chi --with test
Result:
my-app/
frontend/
backend/
api/ # Primary (FastAPI)
payment-svc/ # Express (TypeScript)
notifications/ # Go (Chi)
docker-compose.yml # All services wired
Start easy, graduate when ready:
# POC — deploy to Railway in 1 minute
npx create-kickstart deploy --provider railway
# Production — switch to AWS ECS with Terraform
npx create-kickstart deploy --provider aws-ecs
# Generates: VPC, ECS cluster, ECR, ALB, GitHub Actions CI/CD
# Scale — switch to Kubernetes
npx create-kickstart deploy --provider kubernetes
# Generates: Helm chart + K8s manifests
| Tier | Providers |
|---|---|
| PaaS | Railway, Render, Fly.io, Vercel |
| Cloud-native | AWS ECS (Fargate), GCP Cloud Run, Azure Container Apps |
| Kubernetes | Helm charts + K8s manifests |
Cloud-native providers include full Terraform modules (VPC, load balancer, container registry, auto-scaling).
Every generated project includes AI context files tailored for each tool:
The CLI itself is AI-agent friendly — --no-interactive mode accepts all options as flags, so any AI coding assistant can scaffold projects programmatically.
git clone https://github.com/sswapnil2/create-kickstart
cd create-kickstart
npm install
npm run build
node dist/index.js my-app --type backend --backend fastapi --with docker,env --no-interactive
See CLAUDE.md for architecture docs and "how to add" guides.
MIT
FAQs
Scaffold production-ready fullstack, backend, mobile projects. React + FastAPI/Express/Go/Spring Boot. Docker, CI/CD, Terraform, Grafana, auth, CRUD, AI context (CLAUDE.md, .cursorrules). One command.
We found that create-kickstart demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.