
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
A TypeScript SDK toolkit for building Dapps on Polkadot Cloud - inspired by Hardhat's developer experience.
🚀 Quick Project Setup - Initialize Polkadot Dapp projects in seconds with kitdot install
🎨 React + Solidity Templates - Production-ready templates with Vite, Tailwind CSS, and wagmi
⚙️ Smart Contracts - Hardhat setup for Solidity development on Polkadot Asset Hub
📋 AI Development Guide - Integrated AGENTS.md for LLM-assisted development
🔧 Developer Tools - Rust toolchain management and status checking
🌐 Polkadot Integration - Pre-configured for Paseo testnet with proper network settings
npm install -g kitdot
After global installation, you can use kitdot directly without npx:
kitdot init my-polkadot-dapp # No npx needed!
npx kitdot init my-polkadot-dapp
kitdot install -y my-app
The CLI will guide you through setting up:
- **Full-stack Dapp** - React frontend + Solidity contracts + Hardhat
- **Frontend only** - React app with wagmi for Polkadot interaction
- **Backend only** - Smart contracts with Hardhat development environment
## Project Structure
my-polkadot-dapp/ ├── contracts/ # Hardhat smart contracts (Solidity) │ ├── contracts/ # Smart contract source files │ ├── ignition/ # Hardhat Ignition deployment modules │ ├── test/ # Contract tests │ └── hardhat.config.ts # Hardhat configuration for Polkadot ├── frontend/ # React frontend with Polkadot integration │ ├── src/ # React TypeScript source │ ├── src/generated.ts # Auto-generated contract types │ └── wagmi.config.ts # wagmi configuration for Polkadot ├── AGENTS.md # AI development guide for LLMs └── README.md # Project-specific documentation
## Commands
```bash
# Project Creation
kitdot install [project-name] # Create new project (recommended)
kitdot init [project-name] # Alternative to install command
kitdot install -y [project-name] # Use default template without prompts
# Development Tools
kitdot tools install-rust # Install Rust toolchain
kitdot tools check # Check tool status
# Help
kitdot --help # Show all available commands
kitdot init --help # Show specific command help
Note: Replace
kitdotwithnpx kitdotif you haven't installed globally.
kitdot install my-dapp
cd my-dapp
cd contracts
npm install
npx hardhat compile # Compile contracts
npx hardhat test # Run tests
npx hardhat ignition deploy ./ignition/modules/MyToken.ts --network passetHub
cd frontend
npm install
npm run generate # Generate contract types from deployed contracts
npm run dev # Start development server
# Set up private key for contract deployment
npx hardhat vars set PRIVATE_KEY # In contracts directory
# Get testnet tokens
# Visit: https://faucet.polkadot.io/?parachain=1111
@parity/hardhat-polkadotkitdot includes production-ready templates:
MIT License - see LICENSE for details.
FAQs
A TypeScript SDK toolkit for building Dapps on Polkadot Cloud
The npm package kitdot receives a total of 1 weekly downloads. As such, kitdot popularity was classified as not popular.
We found that kitdot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.