
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
wavythreads-cli
Advanced tools
WavyThreads CLI is a command-line tool designed by Mohamad Zubi to quickly scaffold and initialize backend projects with user authentication using Node.js, Express, MongoDB, bcrypt for password hashing, and JWT for authentication tokens.
To use WavyThreads CLI, you need Node.js (which includes npm) installed on your machine. You can install the CLI globally using npm:
npm install -g wavythreads-cli
To create a new project with WavyThreads CLI, run the following command:
wavythreads-cli init <project-name>
This command will set up a new project with the following structure:
- src/Controllers: Controllers for handling business logic.
- src/Middlewares: Middleware functions for request handling.
- src/Models: MongoDB models for data schema.
- src/Routes: Express routes for API endpoints.
- src/index.js: Main application entry point.
- .env: Environment configuration file with MongoDB connection URI, port, and JWT secret.
The project will also include the necessary dependencies in package.json and install them automatically using npm.
Once initialized, you can start your project using nodemon for automatic server restarts:
npm start
This command will start the server defined in src/index.js and restart it whenever changes are made.
The generated project will have the following structure:
<project-name>/
├── src/
│ ├── Controllers/
│ ├── Middlewares/
│ ├── Models/
│ ├── Routes/
│ └── index.js
├── .env
└── package.json
express: Fast, unopinionated, minimalist web framework for Node.js.
mongoose: MongoDB object modeling tool designed to work in an asynchronous environment.
bcrypt: Library for hashing passwords.
dotenv: Loads environment variables from a .env file.
nodemon: Utility for automatically restarting the server when files change.how to preview md file in vscodehow to preview md file in vscode
jsonwebtoken: jwt authentication.
Contributions are welcome! Feel free to open issues or submit pull requests on GitHub.
FAQs
A CLI tool to automate setup of backend projects
We found that wavythreads-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.