
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
create-next-dashboard
Advanced tools
Set up a full-stack Next.js dashboard by running one NPX command.
Visit https://create-next-dashboard.vercel.app. You can use these credentials to login and access protected routes:
Email: test@test.com
Password: 12345678
Setup a local deployment using this npx command:
npx create-next-dashboard my-app
.env file and provide these variables:JWT_SECRET = // Pass-phrase to encode JWT tokens
MONGO_ATLAS_URI = // MongoDB Atlas Cloud Database Server URL, See database section below
NEXT_PUBLIC_URL = 'http://localhost:3000'
SMTP credentials obtained from your Email provider in .env to enable Email features. Registering and authentication will face issues if these variables are not provided.MAIL_SMTP_HOST =
MAIL_SMTP_USER =
MAIL_SMTP_PASS =
MAIL_SMTP_PORT =
MAIL_SMTP_SECURE = // Boolean
MAIL_SMTP_TLS_REJECT_UNAUTHORIZED = // Boolean
MAIL_SMTP_TLS_CIPHER =
MAIL_SMTP_SERVICE =
MAIL_SMTP_VERBOSE = // Boolean, Nodemailer will log details if true
Not all of these variables are required. For example if you're using Gmail you only need these variables:
MAIL_SMTP_USER = // Your Gmail Address
MAIL_SMTP_PASS = // Google App Password
MAIL_SMTP_SERVICE = 'Gmail'
npm run dev, the app should be running in localhost:3000!All configs and contents are located inside the config folder.
Refer to Next.js Deployment Documentation to find the best deployment strategy for you.
Authentication is implemented using httpOnly cookies served from serverless API functions.
You can spin up a MongoDB database instance using MongoDB Atlas. Provide the MOGNO_ATLAS_URI in .env.
You only need to provide your NEXT_PUBLIC_GOOGLE_ANALYTICS_ID in .env file to activate your Google Analytics.
You provide the list of languages you are willing to support in next.config.js file. All of the i18n content is located in the i18n.content.js file in config directory.
If you want to disable i18n & the select language dropdown in the Header, you only need to remove the i18n key from next.config.js. In this case the
en content from the i18n.config.js file will be served as default.
Composing and sending Email templates is handled using Angra.
FAQs
Set up a full-stack Next.js dashboard by running one NPX command.
The npm package create-next-dashboard receives a total of 2 weekly downloads. As such, create-next-dashboard popularity was classified as not popular.
We found that create-next-dashboard demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.