
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
create-larc-app
Advanced tools
Official CLI tool for creating and managing LARC applications.
# Create a new LARC app
npx create-larc-app my-app
# Or with options
npx create-larc-app my-app --template=dashboard --yes
Create a new LARC application:
npx create-larc-app <project-directory> [options]
Options:
-t, --template <template> - Template to use (minimal, dashboard, blog)-y, --yes - Skip prompts and use defaults--no-install - Skip npm install--no-git - Skip git initializationExamples:
# Interactive mode
npx create-larc-app my-app
# With template
npx create-larc-app my-dashboard --template=dashboard
# Skip prompts
npx create-larc-app my-app --yes
Start development server:
larc dev [options]
Options:
-p, --port <port> - Port number (default: 3000)--no-open - Don't open browser--no-hot - Disable hot module reloadExample:
larc dev --port=8080
Add a component from the registry:
larc add <component> [options]
Options:
-y, --yes - Skip confirmationExamples:
# Interactive
larc add pan-card
# Skip confirmation
larc add @larcjs/ui --yes
# By npm package
larc add @username/my-component
Generate boilerplate code:
larc generate <type> <name> [options]
Alias: larc g
Options:
-d, --dir <directory> - Output directory (default: src/components)Examples:
# Generate a component
larc generate component my-widget
# Generate in custom directory
larc g component my-widget --dir=src/widgets
Preview production build:
larc preview [options]
Options:
-p, --port <port> - Port number (default: 4000)my-app/
├── index.html # Entry point
├── src/
│ ├── app.js # Main application
│ └── components/ # Custom components
├── public/
│ ├── styles.css # Global styles
│ └── assets/ # Static assets
├── larc.config.json # LARC configuration
├── package.json
└── README.md
Configuration file for LARC projects:
{
"version": "1.0.0",
"importmap": {
"imports": {
"@larcjs/core": "https://cdn.jsdelivr.net/npm/@larcjs/core@latest/dist/index.js",
"@larcjs/ui": "https://cdn.jsdelivr.net/npm/@larcjs/ui@latest/dist/index.js"
}
},
"devServer": {
"port": 3000,
"hot": true,
"open": true
}
}
Basic starter with essential structure:
Admin dashboard starter:
Blog/content site starter:
Create project:
npx create-larc-app my-app
cd my-app
Start dev server:
npm run dev
Add components:
larc add pan-card
Generate custom components:
larc generate component my-widget
Build for production:
# No build needed! Just deploy your files
The dev server includes hot reload:
src/, public/, and HTML filesLARC uses native import maps for dependency management:
<script type="importmap">
{
"imports": {
"@larcjs/core": "https://cdn.jsdelivr.net/npm/@larcjs/core@latest/dist/index.js"
}
}
</script>
Managed automatically via larc.config.json.
LARC embraces the no-build philosophy:
See CONTRIBUTING.md
MIT
FAQs
CLI tool for creating and managing LARC applications
We found that create-larc-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.