
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
createforge
Advanced tools
Ship full-stack apps, not scaffolds — from idea to deployed product in minutes
Ship full-stack apps, not scaffolds — From idea to deployed product in minutes.
Most scaffolding tools give you a skeleton. CreateForge gives you a living, breathing app — battle-tested, production-ready, and delightful to work with.
npx createforge my-saas
# ✨ Live app in < 5 minutes
# ✓ Tests passing
# ✓ Demo data seeded
# ✓ Ready to deploy
Time to first success: < 10 minutes (we measure this obsessively)
Spawn a fully running instance in your browser. Edit code, see live preview, share with teammates — zero local setup.
forge create --live
# Opens instant browser environment
# Share link: https://live.forge.dev/your-app
Build by talking. Upgrade by asking.
forge copilot "Add Stripe payments with a pricing table"
# ✓ Installs Stripe
# ✓ Creates pricing components
# ✓ Adds checkout flow
# ✓ Includes test data
Never worry about outdated dependencies or security issues.
forge health
# Checks: dependencies, security, tests, config
# One-click PR for upgrades
Every template passes automated quality gates:
No toy projects. Only production-grade code.
Every template includes multiple scenarios:
Demo like it's real — because it is.
forge add stripe # Payments
forge add clerk # Auth
forge add supabase # Database
forge add openai # AI
Plugins are npm packages. Marketplace shows installs, ratings, and revenue-share for creators.
forge init
# ✓ Creates GitHub repo
# ✓ Sets up CI/CD
# ✓ Enables Dependabot
# ✓ Configures secrets
# ✓ Creates starter issues
One command. Everything configured.
Every PR gets a live preview with seeded data. Reviewers can play with the real app.
forge profile --edit
# Save favorite stack
# Set code style
# Define team policies
Your generator. Your way.
# Interactive mode
npx createforge
# Or specify everything
npx createforge my-app --template nextjs-saas --live
# Navigate and run
cd my-app
npm run dev
Minute 0-5: Run npx createforge → instant live demo
Minute 5-20: Edit in browser or VS Code → first deploy (confetti 🎉)
Hour 1: Add Stripe → payments work with test data
Day 1-7: Share demo, get feedback, install community plugin
Week 2-4: Contribute plugin/template → earn recognition
| Template | Description | Stack |
|---|---|---|
| nextjs-saas | Production SaaS with auth, payments, dashboard | Next.js 14, TypeScript, Tailwind, Stripe, Clerk |
| ai-rag | RAG chat with vector search | Next.js, OpenAI, Pinecone, LangChain |
| ecommerce | Full store with cart, checkout, admin | Next.js, Stripe, Shopify, Tailwind |
All templates include:
# Create new app
forge create [name] [--template <id>] [--live]
# Open in browser environment
forge live [path]
# Add plugin
forge add <plugin>
# Check project health
forge health [--fix]
# Setup GitHub & deployment
forge init [--deploy <platform>]
# Manage profile
forge profile [--edit]
# Install plugin
forge add stripe
# List available plugins
forge plugins
# Create your own
forge plugin create my-plugin
| Feature | Other Tools | CreateForge |
|---|---|---|
| Time to first success | 30-60 min | < 10 min |
| Production ready | ❌ Skeleton only | ✅ Battle-tested |
| Live browser preview | ❌ | ✅ Forge Live |
| Demo data included | ❌ | ✅ Multiple scenarios |
| One-click deployment | ❌ | ✅ GitHub + Vercel |
| Plugin marketplace | ❌ | ✅ With revenue share |
| Health monitoring | ❌ | ✅ Auto PR for fixes |
| Tests included | ❌ | ✅ All templates |
Best template wins sponsorship. Submit yours!
Live sessions where you build and ship in one hour.
We design every feature to trigger one or more of these emotions:
npx createforge
This runs the latest version directly - perfect for one-time use or trying it out!
npm install -g createforge
After installation, use either command:
forge create my-app
# or
createforge create my-app
📖 Full Installation Guide - Includes troubleshooting and developer setup
forge create my-saas --template nextjs-saas
cd my-saas
forge add stripe
forge init --deploy vercel
forge create ai-chat --template ai-rag
cd ai-chat
forge add openai
forge live # Test in browser
forge create my-app
cd my-app
forge add clerk # Auth
forge add supabase # Database
forge add analytics # Tracking
CreateForge saves your preferences in ~/.config/createforge/:
{
"profile": {
"name": "Your Name",
"favoriteStack": ["nextjs", "typescript", "tailwind"],
"codeStyle": "standard"
},
"templates": {
"favorites": ["nextjs-saas"],
"recent": ["nextjs-saas", "ai-rag"]
}
}
We collect minimal, opt-in telemetry to improve UX:
Always opt-in. Always transparent.
# Disable telemetry
forge telemetry --disable
Show off what you built:
[](https://forge.dev)
MIT © CreateForge
Ship full-stack apps, not scaffolds.
Get Started • Templates • Plugins • Showcase
Made with ❤️ by developers, for developers
FAQs
Ship full-stack apps, not scaffolds — from idea to deployed product in minutes
The npm package createforge receives a total of 3 weekly downloads. As such, createforge popularity was classified as not popular.
We found that createforge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.