
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
nextjs-claude-code
Advanced tools
Spec-Driven AI Development workflow for Next.js & React — from spec to shipped with Claude Code.
Define your feature. Claude builds exactly what the spec says — with every change traced back to a requirement.
For Humans — Installation Guide
For Claude Code — fetch the guide and follow it:
curl -s https://raw.githubusercontent.com/ByeongminLee/nextjs-claude-code/main/docs/installation.md
Features are never completed in a single iteration. You ship a basic checkout, add coupons a month later, then subscriptions, then promotions. At every step you need to know what was built before, what the current spec looks like, and what changed.
Existing spec-driven tools like Spec-kit and OpenSpec work well for independent changes, but their change-based folder structure makes it hard to see how a single feature evolves over time.
/spec payment-coupon "add coupon support to payment, Figma: https://..." # define the spec
/dev payment-coupon # implement
spec/feature/[name]/) that persists throughout the project lifetime. Changes accumulate as history entries.NCC is optimized for teams that iteratively implement confirmed specs on a feature-by-feature basis. It is for teams whose features keep evolving after launch — where a single payment feature grows from basic checkout to coupons to subscriptions to promotions over months.
/spec [name] "describe the feature" → spec-writer clarifies → writes spec.md + design.md
/dev [name] → planner → executor → verifier → done
/loop [name] → reviewer → targeted fix → re-review → repeat until 100%
User Claude Agents Files
──── ───────────── ─────
/spec [name] "..." ──→ spec-writer ──→ spec/feature/[name]/spec.md
spec/feature/[name]/design.md
/dev [name] ──→ planner ──→ spec/feature/[name]/CONTEXT.md (WHY)
│ spec/feature/[name]/PLAN.md (WHAT)
↓ (after user confirms)
executor ──→ source code
│
↓
verifier ──→ (read-only verification)
│
↓ (after verification)
executor ──→ spec/feature/[name]/history/
spec/STATE.md
/review [name] ──→ reviewer ──→ (spec compliance report)
code-quality- ──→ (code quality report)
reviewer
/loop [name] ──→ loop ──→ reviewer (REQ check)
│ ↓ (failing REQs)
↓ executor (targeted fix)
(repeat, max 5) ↓ (re-review)
↓ verifier (Level 1-4)
done or escalation spec/feature/[name]/history/
/status ──→ status ──→ (read-only report)
/debug "..." ──→ debugger ──→ spec/DEBUG.md
spec/STATE.md
/rule "..." ──→ rule-writer ──→ spec/rules/[topic].md
| Agent | Role | Modifies code | Modifies spec docs |
|---|---|---|---|
init | Codebase analysis, draft spec docs | No | Yes |
spec-writer | Write spec.md + design.md | No | Yes |
planner | Create CONTEXT.md + PLAN.md | No | Yes |
executor | Implement features | Yes | Partial (STATE, history) |
verifier | 4-level verification | No | No (read-only) |
reviewer | Spec compliance report | No | No (read-only) |
code-quality-reviewer | Code quality review | No | No (read-only) |
status | Project status summary | No | No (read-only) |
debugger | Bug fixing | Yes | Yes (DEBUG.md) |
rule-writer | Manage coding rules | No | Yes (spec/rules/) |
loop | Force-complete REQ compliance | Yes (via executor) | Partial (STATE, history) |
/dev: shared across the session. /loop: resets per iteration. /debug: per bug.spec/STATE.md tracks multiple features independently — switch between features without losing progress/dev and /loop sessions resume from where they left off — each feature's phase (planning, executing, verifying, looping) is tracked independently in STATE.md/dev warns if spec.md has been modified since the feature's PLAN.md was created.claude/RULE.md Model Routing for criteria.Issues and PRs welcome.
MIT
FAQs
Spec-Driven AI Development workflow for Next.js & React with Claude Code
The npm package nextjs-claude-code receives a total of 26 weekly downloads. As such, nextjs-claude-code popularity was classified as not popular.
We found that nextjs-claude-code demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.