
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
create-own-app
Advanced tools
visit: create-own-app
To get started with the project, run the following command to scaffold a new app:
npm create own-app@latest
pnpm create own-app@latest
yarn create own-app@latest
bun create own-app@latest
The foundation of the stack consists of Next.js for building optimized applications and TypeScript for enhanced development with type safety. Tailwind CSS/Shadcn is typically included for rapid, responsive design.
For backend development, consider adding:
For our CI (Continuous Integration) setup, we offer experimental flags that allow you to scaffold an app without any interactive prompts. These flags are useful for automating the setup process.
Note: These flags are experimental and may change in future versions without following semantic versioning.
| Flag | Description |
|---|---|
[dir] | Specify the project directory name. |
-y, --default | Bypass prompts and scaffold with all default options. |
--trpc | Add tRPC for type-safe API communication. |
--prisma | Include Prisma ORM for type-safe database access. |
--drizzle | Include Drizzle ORM for modern database management. |
--nextAuth | Add NextAuth.js for flexible authentication solutions. |
--tailwind | Include Tailwind CSS for utility-first styling. |
--dbProvider [provider] | Configure a database provider for the project. |
--appRouter | Use Next.js App Router for routing. |
--noGit | Skip initializing a Git repository for the project. |
--noInstall | Generate the project without installing dependencies. |
Special thanks to t3-oss for creating create-t3-app.
FAQs
Create web application with the `create-own-app`
We found that create-own-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.