
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
devstart-cli
Advanced tools
A powerful CLI tool that scaffolds production-ready Next.js projects with your preferred tech stack in seconds
Stop configuring. Start building.
A powerful CLI that scaffolds production-ready Next.js projects with your preferred tech stack in 30 seconds.
npx devstart-cli init
Before: Spend 2-4 hours configuring Next.js, Tailwind, Supabase, TanStack Query, Zustand, shadcn/ui, TypeScript, ESLint...
After: Run one command. Answer 9 questions. Start building features in 30 seconds.
DevStart generates production-ready projects with working setup files for all your integrations — not just dependencies, but configured clients, providers, and boilerplate.
npx devstart-cli init
That's it. No global installation needed.
Or install globally:
npm install -g devstart-cli
devstart init
DevStart doesn't just install packages — it creates working setup files for your stack:
For Supabase: lib/supabase/client.ts + lib/supabase/server.ts — Browser and server clients ready to use
For shadcn/ui: components.json + lib/utils.ts — Run npx shadcn@latest add button immediately
For Zustand: lib/example-store.ts — Example store with counter logic
For TanStack Query: lib/query-provider.tsx — Provider auto-wrapped in layout.tsx
For NextAuth: app/api/auth/[...nextauth]/route.ts + lib/auth.ts — Auth handler and config
For Prisma: prisma/schema.prisma + lib/prisma.ts — Example schema and client
For MongoDB: lib/mongodb.ts — Connection setup with singleton pattern
For Redux: lib/store.ts + lib/redux-provider.tsx — Store and provider auto-wrapped
For Firebase: lib/firebase.ts — Initialized with Auth and Firestore
For Clerk: middleware.ts — Clerk middleware ready
For Jotai: lib/atoms.ts — Example atoms
For SWR: lib/swr-config.ts — SWR configuration
For Apollo: lib/apollo-client.ts + lib/apollo-provider.tsx — GraphQL client and provider
Plus: .env.local.example, README.md, beautiful landing page, and more.
$ npx devstart-cli init
Welcome to DevStart CLI! 🚀
? What's your project name? my-saas-app
? Which framework? Next.js 16 (App Router)
? Choose your styling solution: Tailwind CSS
? Add UI components? shadcn/ui
? State management? Zustand
? Data fetching? TanStack Query
? Database & Backend? Supabase
? Authentication? Supabase Auth
? Additional tools? Zod, Lucide Icons
✓ Created project folder
✓ Initialized Next.js 16 (App Router)
✓ Configured Tailwind CSS
✓ Added shadcn/ui components
✓ Setup Zustand store
✓ Configured TanStack Query
✓ Setup Supabase client
✓ Configured Supabase Auth
✓ Created package.json
✓ Created .env.local.example
✓ Initialized Git repository
✔ Dependencies installed successfully!
✅ Project created successfully!
Next steps:
cd my-saas-app
cp .env.local.example .env.local
# Add your Supabase keys
npm run dev
Your app is running at http://localhost:3000
my-saas-app/
├── app/
│ ├── layout.tsx # Auto-wrapped with providers
│ ├── page.tsx # Beautiful landing page
│ └── globals.css
├── lib/
│ ├── supabase/
│ │ ├── client.ts # ✅ Browser client
│ │ └── server.ts # ✅ Server client
│ ├── example-store.ts # ✅ Zustand store
│ ├── query-provider.tsx # ✅ TanStack Query provider
│ └── utils.ts # ✅ shadcn cn() helper
├── components.json # ✅ shadcn config
├── .env.local.example # ✅ Environment variables
├── package.json
├── tsconfig.json
├── tailwind.config.ts
└── README.md
|
Frameworks
Styling
UI Components
|
State Management
Data Fetching
Database
|
Authentication
Additional Tools
|
DevStart CLI follows a simple philosophy:
One command. Zero opinions. Production ready.
Want to contribute or run locally?
git clone https://github.com/akshadjaiswal/devstart.git
cd devstart
npm install
npm link
devstart init
v1.0 (Current) - Core CLI with 13 integrations v1.1 (Next) - Template presets (SaaS, Blog, Dashboard) v1.2 (Future) - Configuration save/load v2.0 (Future) - Custom templates and marketplace
Built by Akshad Jaiswal
Contributions are welcome! Please read the Contributing Guide first.
MIT © Akshad Jaiswal
Stop configuring. Start building.
Made with ❤️ for developers who want to ship faster.
FAQs
A powerful CLI tool that scaffolds production-ready Next.js projects with your preferred tech stack in seconds
The npm package devstart-cli receives a total of 4 weekly downloads. As such, devstart-cli popularity was classified as not popular.
We found that devstart-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.