
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
create-resolve-app
Advanced tools
A tool that generates boilerplate web applications based on the reSolve framework
This package creates an empty reSolve application. Use the --example option to create an application based on an example or template project. ReSolve applications comply with the CQRS and Event Sourcing principles and use React + Redux on the client side by default.
Create reSolve App allows you to specify application blocks (aggregates, read models, and UI elements (React components)) in a semi-declarative manner. The @resolve-js/scripts package deploys API backend and domain services to interact with the client. The @resolve-js/redux package automates the client-server interaction.
Refer to the React/Redux Links document for details on subject-related technologies and links to the corresponding resources.
Available options:
--example <folder> - create an application based on an example or project template. The default is the react template project.--branch <branch> or --commit <sha> - use the example code from the specific branch or commit.--typescript or -t - create a TypeScript project.--version or -V - show the version number.Note: Installing a package globally may require administrative privileges. This means you have to use the
sudocommand for Unix-based systems or run a terminal with administrative privileges on Windows systems.
npm i -g create-resolve-app
create-resolve-app my-resolve-app
cd my-resolve-app
npm run dev

After that, your app (the http://localhost:3000/ URL) opens in the default browser.
Create a new reSolve application in one of the following ways:
yarn:
yarn create resolve-app my-resolve-app
npx:
npx create-resolve-app my-resolve-app
npm:
npm i -g create-resolve-app
create-resolve-app my-resolve-app
This creates the my-resolve-app directory in the current directory and places your new app into it.
Once the installation completes, you can start your app by running npm run dev or yarn dev in your application directory.
This runs the app in the development mode. Open the http://localhost:3000 URL to view it in your default browser.
The page reloads as you edit source code files. All errors appear in the console.
The npm run build or yarn build command builds the client and server bundles for production using Webpack.
Building is performed in the NODE_ENV === 'production' mode, so the build is optimized.
The HTTP server for the serving client bundle and assets is not included.
npm start or yarn start
npm test or yarn test
npm run test:functional or yarn test:functional
The resolve-create-app script adds a copy of the User Guide to your project folder as the README.md file.
FAQs
A tool that generates boilerplate web applications based on the reSolve framework
The npm package create-resolve-app receives a total of 783 weekly downloads. As such, create-resolve-app popularity was classified as not popular.
We found that create-resolve-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.