
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
mern-stack-app-template
Advanced tools
A MERN Stack Template created to easily get started with developing a Full Stack Web App using the complete MERN Stack
To setup the project, use npx and NOT npm i
Run the following command in your terminal:
npx mern-stack-app-template my-mern-app
or to setup in root folder
npx mern-stack-app-template .
To clone the project, Run the following command in your terminal:
git clone https://github.com/Vishal-Katta/MERN-stack-template.git
cd MERN-stack-template
You will need latest version of NodeJS
and MongoDB
installed locally on your machine.
To configure this application for use of MongoDB, you should change the Environment variable in .env
file with your database url.
Quick Note: This project is equiped with a basic API setup using Mongoose. It is expected that you will modify this API backend as necessary to suite your project. DO NOT count on and use the current API's USER SCHEMA as it is only meant as a placeholder and is far from a complete model.
To get started with this project, you'll want to install the required dependencies and The following command installs both client and server packages including root directory package.json:
npm run setup
Starting the project
To run whole project ( backend and frontend ) you can use the following command:
npm run start
To start just the backend MonogoDB server and work on the API you can run:
npm run server
To start just the frontend and work on the UI, you can run:
npm run client
To run backend on build file of frontend, you can run:
npm run build:preview
A list of dependencies used in the project, along with brief explanations for each.
.env
file into process.env
.
React is a JavaScript library for building user interfaces, developed and maintained by Facebook.
React DOM is the package responsible for rendering React components in the DOM.
React Router DOM provides declarative routing for React applications, enabling navigation between different components.
Redux Toolkit is the official toolset for efficient Redux development, offering simplified Redux setup and improved developer experience.
React Redux is the official React bindings for Redux, allowing React components to interact with the Redux store.
Axios is a promise-based HTTP client for making HTTP requests from the browser.
Material UI is a popular React UI framework that provides pre-designed React components following the Material Design guidelines.
Tailwind CSS Forms provides styles and utilities for styling forms in Tailwind CSS.
React Toastify is a notification library for React applications, providing customizable toast notifications.
Emotion is a popular CSS-in-JS library for styling React components.
Material UI Icons provides a collection of high-quality icons for use with Material-UI components.
React Icons provides a collection of popular icon libraries as React components for easy integration.
Redux Logger is a middleware for Redux that logs actions and state changes, useful for debugging Redux applications.
Redux Thunk is a Redux middleware that allows dispatching asynchronous actions, enabling more complex logic in Redux.
Tailwind Scrollbar Hide is a utility for hiding scrollbars in Tailwind CSS, useful for customizing scrollbar appearance.
FAQs
A MERN Stack Template created to easily get started with developing a Full Stack Web App using the complete MERN Stack
The npm package mern-stack-app-template receives a total of 3 weekly downloads. As such, mern-stack-app-template popularity was classified as not popular.
We found that mern-stack-app-template demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.