
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
create-volo-app
Advanced tools
CLI tool to create AI-ready full-stack apps with an integrated React frontend, Hono backend, Auth, and Postgres database.
AI-ready Full‑Stack Starter Kit for Vibe Coding, Rapid Prototyping & Production Scaling
Create full-stack apps with React, Firebase Auth, and Postgres all set up for you. Start with a full local stack in under 30 seconds and use connect
when ready - or use the --full
flag to immediately start with production services hooked up.
# Local development (default) - working app in 30 seconds!
npx create-volo-app my-app
# Full production setup
npx create-volo-app my-app --full
Full Stack:
Local Development (Default):
Production (Optional):
Perfect for learning, prototyping, and development:
npx create-volo-app my-app
cd my-app
pnpm run dev
For production-ready apps:
# All production services
npx create-volo-app my-app --full
# Modular: mix local and production services
npx create-volo-app my-app --auth # Production Firebase + local database
npx create-volo-app my-app --database neon # Production database + local auth
npx create-volo-app my-app --deploy # Deployment setup + local services
Start local, connect production services later:
# Start with local development
npx create-volo-app my-app
cd my-app
# Connect production services when ready
pnpm connect:auth # Production Firebase Auth
pnpm connect:database # Choose database provider
pnpm connect:deploy # Cloudflare deployment
pnpm connection:status # Check current setup
The CLI will check and guide all other installation as needed.
# Local development - instant setup
npx create-volo-app my-app
# Create project in current folder
npx create-volo-app .
# Production with specific database
npx create-volo-app my-app --database neon
npx create-volo-app my-app --database supabase
# Production Firebase Auth only
npx create-volo-app my-app --auth
# Full production setup
npx create-volo-app my-app --full
# Fast mode (minimal prompts)
npx create-volo-app my-app --full --fast
# Connect to existing project
npx create-volo-app --connect --database --path ./my-app
npx create-volo-app --status --path ./my-app
Your local development environment includes:
./data/postgres
http://localhost:5173
http://localhost:8787
All data persists locally between development sessions in the data
folder within your project
cd server
pnpm run deploy
Set production environment variables (use wrangler
for easier management):
# Recommended: Use wrangler CLI
cd server
wrangler secret put DATABASE_URL
wrangler secret put FIREBASE_PROJECT_ID
wrangler secret put FIREBASE_PRIVATE_KEY
wrangler secret put FIREBASE_CLIENT_EMAIL
# Alternative: Set in Cloudflare dashboard
# Go to Workers Dashboard > Your Worker > Settings > Variables
Manual Setup:
pnpm run build
ui/dist
Add your Pages domain to Firebase:
*.pages.dev
domainFor CI/CD, use GitHub Actions or similar with Cloudflare API tokens:
wrangler deploy
in your pipelinegit clone https://github.com/VoloBuilds/create-volo-app.git
cd create-volo-app
pnpm install
pnpm run build
node bin/cli.js test-app
See /test
for testing tools and instructions.
MIT
FAQs
CLI tool to create AI-ready full-stack apps with an integrated React frontend, Hono backend, Auth, and Postgres database.
The npm package create-volo-app receives a total of 10 weekly downloads. As such, create-volo-app popularity was classified as not popular.
We found that create-volo-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.