create-daloy 1.0.0-rc.4 → 1.0.0-rc.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +16 -16
- package/bin/create-daloy.mjs +577 -111
- package/package.json +1 -1
- package/sbom.cdx.json +9 -9
- package/sbom.spdx.json +5 -5
- package/templates/_ci/deno/SECURITY.md +34 -3
- package/templates/_ci/deno/_github/workflows/ci.yml +16 -0
- package/templates/_ci/deno/_github/workflows/codeql.yml +4 -0
- package/templates/_ci/deno/_github/workflows/container-scan.yml +4 -0
- package/templates/_ci/deno/_github/workflows/osv-scan.yml +4 -3
- package/templates/_ci/deno/_github/workflows/scorecard.yml +21 -1
- package/templates/_ci/deno/_github/workflows/secret-scan.yml +9 -1
- package/templates/_ci/deno/_github/workflows/zizmor.yml +4 -0
- package/templates/_ci/node/SECURITY.md +40 -8
- package/templates/_ci/node/_github/dependabot.yml +9 -0
- package/templates/_ci/node/_github/workflows/ci.yml +10 -2
- package/templates/_ci/node/_github/workflows/codeql.yml +4 -0
- package/templates/_ci/node/_github/workflows/container-scan.yml +4 -2
- package/templates/_ci/node/_github/workflows/dast.yml +33 -16
- package/templates/_ci/node/_github/workflows/osv-scan.yml +2 -2
- package/templates/_ci/node/_github/workflows/scorecard.yml +21 -1
- package/templates/_ci/node/_github/workflows/secret-scan.yml +9 -1
- package/templates/_ci/node/_github/workflows/zizmor.yml +4 -0
- package/templates/bun-basic/AGENTS.md +5 -1
- package/templates/bun-basic/CLAUDE.md +1 -1
- package/templates/bun-basic/README.md +4 -0
- package/templates/bun-basic/_agents/skills/daloyjs-best-practices/SKILL.md +32 -1
- package/templates/bun-basic/_vscode/mcp.json +1 -1
- package/templates/bun-basic/package.json +3 -3
- package/templates/bun-basic/src/build-app.ts +4 -12
- package/templates/cloudflare-worker/AGENTS.md +2 -1
- package/templates/cloudflare-worker/CLAUDE.md +1 -1
- package/templates/cloudflare-worker/_agents/skills/daloyjs-best-practices/SKILL.md +32 -1
- package/templates/cloudflare-worker/_vscode/mcp.json +1 -1
- package/templates/cloudflare-worker/package.json +2 -2
- package/templates/cloudflare-worker/src/index.ts +3 -5
- package/templates/cloudflare-worker/tests/contract.test.ts +1 -1
- package/templates/deno-basic/AGENTS.md +1 -0
- package/templates/deno-basic/CLAUDE.md +1 -1
- package/templates/deno-basic/README.md +4 -0
- package/templates/deno-basic/_agents/skills/daloyjs-best-practices/SKILL.md +30 -1
- package/templates/deno-basic/_vscode/mcp.json +1 -1
- package/templates/deno-basic/deno.json +5 -5
- package/templates/deno-basic/deno.lock +5 -6
- package/templates/deno-basic/src/build-app.ts +4 -12
- package/templates/deno-basic/tests/contract_test.ts +1 -1
- package/templates/node-basic/AGENTS.md +1 -0
- package/templates/node-basic/CLAUDE.md +1 -1
- package/templates/node-basic/README.md +4 -0
- package/templates/node-basic/_agents/skills/daloyjs-best-practices/SKILL.md +32 -1
- package/templates/node-basic/_vscode/mcp.json +1 -1
- package/templates/node-basic/package.json +3 -3
- package/templates/node-basic/src/build-app.ts +4 -12
- package/templates/node-basic/tests/contract.test.ts +1 -1
- package/templates/node-basic/tsconfig.build.json +1 -1
- package/templates/vercel/AGENTS.md +4 -3
- package/templates/vercel/CLAUDE.md +1 -1
- package/templates/vercel/README.md +3 -0
- package/templates/vercel/_agents/skills/daloyjs-best-practices/SKILL.md +33 -2
- package/templates/vercel/_vscode/mcp.json +1 -1
- package/templates/vercel/api/index.ts +3 -5
- package/templates/vercel/package.json +2 -2
- package/templates/vercel/tests/contract.test.ts +1 -1
package/README.md
CHANGED
|
@@ -51,21 +51,21 @@ pnpm create daloy@latest my-api \
|
|
|
51
51
|
|
|
52
52
|
### Flags
|
|
53
53
|
|
|
54
|
-
| Flag
|
|
55
|
-
|
|
|
56
|
-
| `--template <name>`
|
|
57
|
-
| `--package-manager <pm>`
|
|
58
|
-
| `--list-templates`
|
|
59
|
-
| `--install` / `--no-install`
|
|
60
|
-
| `--git` / `--no-git`
|
|
61
|
-
| `--minimal`
|
|
62
|
-
| `--with-ci` / `--no-ci`
|
|
63
|
-
| `--with-deploy` / `--no-deploy` | Add the starter `.github/workflows/deploy.yml`. Defaults to the same value as `--with-ci`, so you can keep CI but opt out of deploy scaffolding with `--no-deploy`.
|
|
64
|
-
| `--code-owner <owner>`
|
|
65
|
-
| `--force`
|
|
66
|
-
| `--yes`
|
|
67
|
-
| `--help`
|
|
68
|
-
| `--version`
|
|
54
|
+
| Flag | Description |
|
|
55
|
+
| ------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
56
|
+
| `--template <name>` | `node-basic` (default), `vercel`, `cloudflare-worker`, `bun-basic`, or `deno-basic`, `vercel`. |
|
|
57
|
+
| `--package-manager <pm>` | `pnpm` (default), `npm`, `yarn`, or `bun`. Ignored for `deno-basic`. |
|
|
58
|
+
| `--list-templates` | Print available templates with descriptions. |
|
|
59
|
+
| `--install` / `--no-install` | Install dependencies after scaffolding. Defaults to **Y** for npm/yarn/bun and **N** for pnpm so you can review the hardened `.npmrc` / `pnpm-workspace.yaml` and aren't blocked by the 24h `minimumReleaseAge` embargo on the first run. |
|
|
60
|
+
| `--git` / `--no-git` | Initialize a git repository. Defaults to interactive. |
|
|
61
|
+
| `--minimal` | Strip the bookstore demo route and the built-in `/docs` + `/openapi.json` routes so only the framework bootstrap and `/healthz` ship. |
|
|
62
|
+
| `--with-ci` / `--no-ci` | Add the hardened GitHub Actions, Dependabot, CODEOWNERS, SECURITY.md, and lockfile-source verification bundle. **Defaults to Y** so scaffolded projects are secure by default. |
|
|
63
|
+
| `--with-deploy` / `--no-deploy` | Add the starter `.github/workflows/deploy.yml`. Defaults to the same value as `--with-ci`, so you can keep CI but opt out of deploy scaffolding with `--no-deploy`. |
|
|
64
|
+
| `--code-owner <owner>` | Replace the CODEOWNERS placeholder when `--with-ci` is used, for example `@acme/security`. |
|
|
65
|
+
| `--force` | Overwrite an existing non-empty directory. |
|
|
66
|
+
| `--yes` | Accept all defaults; never prompt. |
|
|
67
|
+
| `--help` | Print usage and exit. |
|
|
68
|
+
| `--version` | Print version and exit. |
|
|
69
69
|
|
|
70
70
|
## Templates
|
|
71
71
|
|
|
@@ -184,7 +184,7 @@ For Node-style templates, the bundle adds the following.
|
|
|
184
184
|
|
|
185
185
|
- `.github/workflows/vuln-scan.yml` — daily cron that runs the package
|
|
186
186
|
manager's audit against the committed lockfile. Catches CVEs disclosed
|
|
187
|
-
|
|
187
|
+
_after_ the last PR or push and provides SOC 2 CC7.1
|
|
188
188
|
([continuous vulnerability management](https://www.aikido.dev/blog/a-guide-to-automating-technical-vulnerability-management-for-soc-2))
|
|
189
189
|
evidence even when nobody is touching the repo.
|
|
190
190
|
- `.github/workflows/osv-scan.yml` — a second, independent SCA source.
|