
Research
/Security News
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
create-n8-app
Advanced tools
Create a Next.js app with the N8 stack - Next.js 16, Tailwind v4, Shadcn/ui, Drizzle, tRPC, TanStack Query, Zustand, NextAuth, and more
Create a new Next.js app with the N8 stack - a modern, full-stack template featuring:
# With npm
npm create n8-app@latest my-app
# With pnpm
pnpm create n8-app@latest my-app
# With yarn
yarn create n8-app my-app
npm create n8-app@latest my-app --skip-install # Skip dependency installation
npm create n8-app@latest my-app --skip-git # Skip git initialization
Set up your database
.env.localSet up GitHub OAuth
http://localhost:3000/api/auth/callback/github.env.localGenerate a secret
openssl rand -base64 32
Add to .env.local as AUTH_SECRET
Run database migrations
pnpm db:generate
pnpm db:push
Start developing
pnpm dev
my-app/
├── app/ # Next.js App Router
│ ├── api/ # API routes (tRPC, auth)
│ ├── auth/ # Auth pages
│ ├── globals.css # Tailwind styles
│ ├── layout.tsx # Root layout
│ ├── page.tsx # Home page
│ └── providers.tsx # Client providers
├── components/ # React components
│ ├── auth/ # Auth components
│ └── ui/ # Shadcn components
├── hooks/ # Custom React hooks
├── lib/ # Utility functions
│ ├── auth.ts # NextAuth config
│ ├── db.ts # Database client
│ ├── env.ts # Environment validation
│ ├── trpc.ts # tRPC client
│ └── utils.ts # Utilities
├── server/ # Server-side code
│ ├── api/ # tRPC routers
│ └── db/ # Database schema
├── stores/ # Zustand stores
├── tests/ # Test files
├── drizzle/ # Database migrations
└── public/ # Static assets
| Command | Description |
|---|---|
pnpm dev | Start development server with Turbopack |
pnpm build | Build for production |
pnpm start | Start production server |
pnpm lint | Run ESLint |
pnpm format | Format code with Prettier |
pnpm test | Run tests with Vitest |
pnpm db:generate | Generate Drizzle migrations |
pnpm db:push | Push schema to database |
pnpm db:studio | Open Drizzle Studio |
npx shadcn@latest add button
npx shadcn@latest add card
npx shadcn@latest add input
Add new routers in server/api/routers/ and register them in server/api/root.ts.
See stores/example-store.ts for patterns. Remember:
MIT
FAQs
Create a Next.js app with the N8 stack - Next.js 16, Tailwind v4, Shadcn/ui, Drizzle, tRPC, TanStack Query, Zustand, NextAuth, and more
The npm package create-n8-app receives a total of 0 weekly downloads. As such, create-n8-app popularity was classified as not popular.
We found that create-n8-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.

Security News
Socket found a malicious postinstall hook across 700+ GitHub repos, including PHP packages on Packagist and Node.js project repositories.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain