
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
create-sprout
Advanced tools
🌱 A CLI-based scaffolder that outputs tailored project starters.
Netlife Sprout is a tool created by folks at Netlife.com, so that they could start new projects more effectively, with best practices, reuse and planet first in mind.
👉 The project is in ALPHA (work in progress).
Choose one of these methods:
npm init sproutnpx create-sproutnpm install -g create-sprout...and then you'll be able to use the create-sprout command.
create-sprout
By default, when running create-sprout without any option or flag, you'll be presented with prompts, so you can tailor the application to your needs without being familiar with available options or flags.
But for those interested in automation or simply in saving time, there are some pre-defined CLI commandos at your disposal:
Currently fullstack-gatsby-sanity or fullstack-next-sanity.
create-sprout fullstack-next-sanity
--yes or -yWhen passed, prompts will be skipped. Useful when passing both choices and chosen flags, making the prompt unnecessary.
👉 Without defining the first config option (template choice), it will default to
Fullstack Gatsby Sanity.
create-sprout --yes
create-sprout fullstack-gatsby-sanity -y
--git or -gWhen passed, git init will be run, initialising a git repo with all files unstaged. Default is false.
create-sprout fullstack-next-sanity --yes --git
create-sprout fullstack-next-sanity -y -g
--install or -iWhen passed, npm install will be run, initialising all dependencies specified in the chosen / tailored package.json file.
create-sprout fullstack-next-sanity --yes --git --install
create-sprout fullstack-next-sanity -y -g -i
--gatsbyDefaultEnvironmentcreate-sprout --gatsbyDefaultEnvironment production
--nodeVersioncreate-sprout --nodeVersion 12.18.0
--ownersNamecreate-sprout --ownersName 'Owner Inc.'
--projectNamecreate-sprout --projectName 'Nice Project Name'
--projectDescriptioncreate-sprout --projectDescription 'Such Wow Description'
--repoOwnercreate-sprout --repoOwner dreamyguy
--sanityAuthTokencreate-sprout --sanityAuthToken lkasjflkjasldfjlkajsdkfjlkajsdfkljsalkjdfsomethingsomething
--sanityProjectIdcreate-sprout --sanityProjectId 701kayak107
--sanityDatasetcreate-sprout --sanityDataset production
--siteUrlcreate-sprout --siteUrl http://thisistheurl.io
Using the full potential of the CLI, with all options, without even installing it first (using npx):
npx create-sprout fullstack-gatsby-sanity --gatsbyDefaultEnvironment envelope --nodeVersion 12.18.0 --ownersName 'Owner Inc.' --projectName 'Naming Names in the Name' --projectDescription 'Such Wow Description' --repoOwner 'Dreamyguy' --sanityAuthToken lkasjflkjasldfjlkajsdkfjlkajsdfkljsalkjdfsomethingsomething --sanityDataset produccione --sanityProjectId 701kayak107 --siteUrl http://thisistheurl.io --yes --git --install
Currently only two: Fullstack Gatsby Sanity and Fullstack Next Sanity. None of them are fully functional at the moment. The project is in ALPHA (work in progress).
Watch this space for highly configurable starters with React, Sanity, Gatsby, NextJs, Bit integration, extensive testing and many other goodies, all bundlet as options within created-sprout.
Everyone involved in this project deserve a mention and a big thanks. If you got involved and are not listed, feel free to add your own name. Sorted alphabetically:
Certain parts of Netlife Sprout are based on, inspired by and/or borrowed from some great open-source projects. There were great researches done as well:
FAQs
An application scaffolder by Nelife.com
We found that create-sprout demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.