
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
create-synapse
Advanced tools
A modern CLI tool for scaffolding end-to-end type-safe TypeScript projects with best practices and customizable configurations
A modern CLI tool for scaffolding end-to-end type-safe TypeScript projects with best practices and customizable configurations

Run without installing globally:
# Using bun (recommended)
bun create better-t-stack@latest
# Using pnpm
pnpm create better-t-stack@latest
# Using npm
npx create-better-t-stack@latest
Follow the prompts to configure your project or use the --yes flag for defaults.
| Category | Options |
|---|---|
| TypeScript | End-to-end type safety across all parts of your application |
| Frontend | • React with TanStack Router • React with React Router • React with TanStack Start (SSR) • Next.js • SvelteKit • Nuxt (Vue) • SolidJS • React Native with NativeWind (via Expo) • React Native with Unistyles (via Expo) • None |
| Backend | • Hono • Express • Elysia • Next.js API routes • Convex • Fastify • None |
| API Layer | • tRPC (type-safe APIs) • oRPC (OpenAPI-compatible type-safe APIs) • None |
| Runtime | • Bun • Node.js • Cloudflare Workers • None |
| Database | • SQLite • PostgreSQL • MySQL • MongoDB • None |
| ORM | • Drizzle (TypeScript-first) • Prisma (feature-rich) • Mongoose (for MongoDB) • None |
| Database Setup | • Turso (SQLite) • Cloudflare D1 (SQLite) • Neon (PostgreSQL) • Supabase (PostgreSQL) • Prisma Postgres (via Prisma Accelerate) • MongoDB Atlas • None (manual setup) |
| Authentication | Better-Auth (email/password, with more options coming soon) |
| Styling | Tailwind CSS with shadcn/ui components |
| Addons | • PWA support • Tauri (desktop applications) • Starlight (documentation site) • Biome (linting and formatting) • Husky (Git hooks) • Turborepo (optimized builds) |
| Examples | • Todo app • AI Chat interface (using Vercel AI SDK) |
| Developer Experience | • Automatic Git initialization • Package manager choice (npm, pnpm, bun) • Automatic dependency installation |
Usage: create-better-t-stack [project-directory] [options]
Options:
-V, --version Output the version number
-y, --yes Use default configuration
--database <type> Database type (none, sqlite, postgres, mysql, mongodb)
--orm <type> ORM type (none, drizzle, prisma, mongoose)
--auth Include authentication
--no-auth Exclude authentication
--frontend <types...> Frontend types (tanstack-router, react-router, tanstack-start, next, nuxt, svelte, solid, native-nativewind, native-unistyles, none)
--addons <types...> Additional addons (pwa, tauri, starlight, biome, husky, turborepo, fumadocs, ultracite, oxlint, none)
--examples <types...> Examples to include (todo, ai, none)
--git Initialize git repository
--no-git Skip git initialization
--package-manager <pm> Package manager (npm, pnpm, bun)
--install Install dependencies
--no-install Skip installing dependencies
--db-setup <setup> Database setup (turso, d1, neon, supabase, prisma-postgres, mongodb-atlas, docker, none)
--web-deploy <setup> Web deployment (workers, alchemy, none)
--server-deploy <setup> Server deployment (workers, alchemy, none)
--backend <framework> Backend framework (hono, express, elysia, next, convex, fastify, none)
--runtime <runtime> Runtime (bun, node, workers, none)
--api <type> API type (trpc, orpc, none)
-h, --help Display help
This CLI collects anonymous usage data to help improve the tool. The data collected includes:
Telemetry is enabled by default in published versions to help us understand usage patterns and improve the tool.
You can disable telemetry by setting the BTS_TELEMETRY_DISABLED environment variable:
# Disable telemetry for a single run
BTS_TELEMETRY_DISABLED=1 npx create-better-t-stack my-app
# Disable telemetry globally in your shell profile (.bashrc, .zshrc, etc.)
export BTS_TELEMETRY_DISABLED=1
Create a project with default configuration:
npx create-better-t-stack my-app --yes
Create a project with specific options:
npx create-better-t-stack my-app --database postgres --orm drizzle --auth --addons pwa biome
Create a project with Elysia backend and Node.js runtime:
npx create-better-t-stack my-app --backend elysia --runtime node
Create a project with multiple frontend options (one web + one native):
npx create-better-t-stack my-app --frontend tanstack-router native-nativewind
Create a project with examples:
npx create-better-t-stack my-app --examples todo ai
Create a project with Turso database setup:
npx create-better-t-stack my-app --database sqlite --orm drizzle --db-setup turso
Create a project with Supabase PostgreSQL setup:
npx create-better-t-stack my-app --database postgres --orm drizzle --db-setup supabase --auth
Create a project with Convex backend:
npx create-better-t-stack my-app --backend convex --frontend tanstack-router
Create a project with documentation site:
npx create-better-t-stack my-app --addons starlight
Create a minimal TypeScript project with no backend:
npx create-better-t-stack my-app --backend none --frontend tanstack-router
Create a backend-only project with no frontend:
npx create-better-t-stack my-app --frontend none --backend hono --database postgres --orm drizzle
Create a simple frontend-only project:
npx create-better-t-stack my-app --backend none --frontend next --addons none --examples none
Create a Cloudflare Workers project:
npx create-better-t-stack my-app --backend hono --runtime workers --database sqlite --orm drizzle --db-setup d1
Create a minimal API-only project:
npx create-better-t-stack my-app --frontend none --backend hono --api trpc --database none --addons none
The created project follows a clean monorepo structure:
my-better-t-app/
├── apps/
│ ├── web/ # Frontend application
│ ├── server/ # Backend API
│ ├── native/ # (optional) Mobile application
│ └── docs/ # (optional) Documentation site
├── packages/ # Shared packages
└── README.md # Auto-generated project documentation
After project creation, you'll receive detailed instructions for next steps and additional setup requirements.
FAQs
A modern CLI tool for scaffolding end-to-end type-safe TypeScript projects with best practices and customizable configurations
The npm package create-synapse receives a total of 1 weekly downloads. As such, create-synapse popularity was classified as not popular.
We found that create-synapse demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.