
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
create-local-voice-agent
Advanced tools
CLI to scaffold production-ready, containerized Voice AI Agents using LiveKit, Python, and Docker
A CLI that scaffolds a production-ready, containerized infrastructure for real-time Voice AI Agents using LiveKit, Python, and Docker.
Stop fighting WebRTC UDP port exhaustion, Docker permission errors, and token handshake wiring — this tool generates a perfect boilerplate in seconds.
npx create-voice-agent my-voice-app
You'll be prompted to choose:
Then:
cd my-voice-app
cp .env.example .env # fill in your API keys
docker compose up --build
my-voice-app/
├── docker-compose.yml # LiveKit + Redis + Agent (+ Frontend)
├── .env.example # Pre-configured environment variables
├── README.md # Project-specific documentation
├── python-agent/
│ ├── Dockerfile # Non-root user (EACCES fix)
│ ├── requirements.txt # livekit-agents + plugins
│ └── agent.py # AgentSession pipeline (VAD→STT→LLM→TTS)
└── frontend/ # (if selected)
├── Dockerfile
├── package.json # includes livekit-server-sdk
├── app/api/token/route.ts # Secure AccessToken generation
└── app/page.tsx # LiveKit Room + voice visualizer
LiveKit's UDP port range is strictly limited to 50000-50050 to prevent docker-proxy from spawning thousands of processes and hanging the host OS.
The Next.js frontend includes a /api/token endpoint using livekit-server-sdk to generate AccessToken JWTs. The browser fetches this token before connecting to the LiveKit room.
The Python agent Dockerfile creates a dedicated agentuser to prevent EACCES permission errors common on Linux hosts.
When Ollama is selected, the agent container uses host.docker.internal to reach the host's GPU-accelerated Ollama instance.
# Clone and install
git clone https://github.com/geladons/create-voice-agent.git
cd create-voice-agent
npm install
# Run locally
node bin/create-voice-agent.js my-test-project
MIT
FAQs
CLI to scaffold production-ready, containerized Voice AI Agents using LiveKit, Python, and Docker
We found that create-local-voice-agent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.