nodejs-quickstart-structure 1.18.0 → 1.19.0

package/CHANGELOG.md

@@ -1,9 +1,22 @@
-# Changelog
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-All notable changes to this project will be documented in this file.
+## [1.19.0] - 2026-03-28
 
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+### Added
+- **Security Hardening**: Added `SECURITY.md` file to the project.
+- **Git Attributes**: Added `.gitattributes` file to the project.
+- **Contributing Guide**: Added `CONTRIBUTING.md` file to the project.
+
+## [1.18.1] - 2026-03-27
+
+### Fixed
+- **Template Security Hardening**: Resolved 29 vulnerabilities in `package.json.ejs` by upgrading `Apollo Server`, `Jest`, and `ESLint`.
+- **Apollo Server 5 Compatibility**: Migrated GraphQL integration to use `@as-integrations/express4`, resolving breaking changes in the latest Apollo release.
+- **Surgical Security Overrides**: Implemented targeted `overrides` for `brace-expansion`, `jake`, and `micromatch`. Removed global `glob/minimatch` overrides to maintain compatibility with Jest's internal APIs while preserving a "Zero-Vulnerability" status.
+- **E2E Validated**: Verified the entire "Secure-by-Default" ecosystem via Windows E2E tests, achieving 100% pass rate.
+- **Enterprise Standards**: Synchronized all generator templates with the latest secure dependency standards across MVC and Clean Architecture.
+### Changed
+- **Readme**: Standardize Generated Project README.
 
 ## [1.18.0] - 2026-03-25
 

package/README.md

@@ -20,7 +20,7 @@ A powerful CLI tool to scaffold production-ready Node.js microservices with buil
 - [⚙️ Configuration Options](#-configuration-options)
 - [🏗️ Generated Project Structure](#-generated-project-structure)
 - [📖 Documentation](#-documentation)
-- [🗺️ Roadmap & Support](#️-roadmap--support)
+- [🗺️ Support & Roadmap](#️-roadmap--support)
 
 ---
 
@@ -53,6 +53,7 @@ nodejs-quickstart init
 - **Communication Patterns**: Supports **REST**, **GraphQL** (Apollo), and **Kafka** (Event-driven).
 - **Multi-layer Caching**: Integrated **Redis** or built-in **Memory Cache**.
 - **AI-Native Optimized**: specifically designed for **Cursor** and AI agents, including built-in `.cursorrules` and Agent Skill prompts. 🚀
+- **Next Gen Web UI**: (Coming Soon) A modern, browser-based project selector featuring real-time virtualization — set for release in v2.0.0!
 
 ---
 

package/bin/index.js

@@ -1,92 +1,93 @@
-#!/usr/bin/env node
-
-import { Command } from 'commander';
-import chalk from 'chalk';
-import { getProjectDetails } from '../lib/prompts.js';
-import { generateProject } from '../lib/generator.js';
-import { readFileSync } from 'fs';
-import { join, dirname } from 'path';
-import { fileURLToPath } from 'url';
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const pkg = JSON.parse(readFileSync(join(__dirname, '../package.json'), 'utf-8'));
-
-const program = new Command();
-
-program
-    .name('nodejs-quickstart')
-    .description('🚀 CLI to scaffold production-ready Node.js microservices.\n\nGenerates projects with:\n- MVC or Clean Architecture\n- REST or Kafka\n- MySQL, PostgreSQL, or MongoDB\n- Docker, Flyway & Mongoose support')
-    .version(pkg.version, '-v, --version', 'Output the current version')
-    .addHelpText('after', `\n${chalk.yellow('Example:')}\n  $ nodejs-quickstart init   ${chalk.gray('# Start the interactive setup')}\n`);
-
-program
-    .command('init')
-    .description('Initialize a new Node.js project')
-    .option('-n, --project-name <name>', 'Project name')
-    .option('-l, --language <language>', 'Language (JavaScript, TypeScript)')
-    .option('-a, --architecture <architecture>', 'Architecture (MVC, Clean Architecture)')
-    .option('--view-engine <view>', 'View Engine (None, EJS, Pug) - MVC only')
-    .option('-d, --database <database>', 'Database (MySQL, PostgreSQL)')
-    .option('--db-name <name>', 'Database name')
-    .option('-c, --communication <communication>', 'Communication (REST APIs, GraphQL, Kafka)')
-    .option('--ci-provider <provider>', 'CI/CD Provider (None, GitHub Actions, Jenkins, GitLab CI)')
-    .option('--include-security', 'Include Enterprise Security Hardening')
-    .option('--caching <type>', 'Caching Layer (None/Redis)')
-    .action(async (options) => {
-        // Fix for Commander camelCase conversion
-        if (options.ciProvider) {
-            options.ciProvider = options.ciProvider;
-        }
-
-        console.log(chalk.blue('Welcome to the Node.js Quickstart Generator!'));
-
-        try {
-            const answers = await getProjectDetails(options);
-            console.log(chalk.green('\nConfiguration received:'));
-            console.log(JSON.stringify(answers, null, 2));
-
-            console.log(chalk.yellow('\nGenerating project...'));
-            await generateProject(answers);
-
-            console.log(chalk.green('\n✔ Project generated successfully!'));
-            
-            console.log(chalk.magenta('\n🚀 Project is AI-Ready!'));
-            console.log(chalk.magenta('-----------------------------------------'));
-            console.log(chalk.magenta('🤖 We detected you are using AI tools.'));
-            console.log(chalk.magenta(`📍 Use Cursor? We've configured '.cursorrules' for you.`));
-            console.log(chalk.magenta(`📍 Use ChatGPT/Gemini? Check the 'prompts/' folder for Agent Skills.`));
-            console.log(chalk.magenta('-----------------------------------------'));
-
-            let manualStartInstructions = `\n${chalk.yellow('Development:')}\n  cd ${answers.projectName}\n  npm install`;
-            
-            const needsInfrastructure = answers.database !== 'None' || answers.caching === 'Redis' || answers.communication === 'Kafka';
-            
-            if (needsInfrastructure) {
-                let servicesToStart = '';
-                if (answers.database === 'MongoDB') servicesToStart += ' db';
-                else if (answers.database !== 'None') servicesToStart += ' db flyway';
-                if (answers.caching === 'Redis') servicesToStart += ' redis';
-                if (answers.communication === 'Kafka') servicesToStart += ' kafka';
-                
-                manualStartInstructions += `\n  docker-compose up -d${servicesToStart}  # Start infrastructure first\n  npm run dev`;
-            } else {
-                manualStartInstructions += `\n  npm run dev`;
-            }
-            
-            console.log(chalk.cyan(`\nNext steps:\n  cd ${answers.projectName}\n  npm install\n  docker-compose up\n-----------------------${manualStartInstructions}\n\n${chalk.yellow('Production (PM2):')}\n  npm run build\n  npm run deploy\n  npx pm2 logs`));
-
-        } catch (error) {
-            if (error.name === 'ExitPromptError') {
-                console.log(chalk.yellow('\n\n👋 Goodbye! Setup cancelled.'));
-                process.exit(0);
-            }
-            console.error(chalk.red('Error generating project:'), error);
-            process.exit(1);
-        }
-    });
-
-program.parse(process.argv);
-
-if (!process.argv.slice(2).length) {
-    program.outputHelp();
-}
+#!/usr/bin/env node
+
+import { Command } from 'commander';
+import chalk from 'chalk';
+import { getProjectDetails } from '../lib/prompts.js';
+import { generateProject } from '../lib/generator.js';
+import { readFileSync } from 'fs';
+import { join, dirname } from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const pkg = JSON.parse(readFileSync(join(__dirname, '../package.json'), 'utf-8'));
+
+const program = new Command();
+
+program
+    .name('nodejs-quickstart')
+    .description('🚀 CLI to scaffold production-ready Node.js microservices.\n\nGenerates projects with:\n- MVC or Clean Architecture\n- REST or Kafka\n- MySQL, PostgreSQL, or MongoDB\n- Docker, Flyway & Mongoose support')
+    .version(pkg.version, '-v, --version', 'Output the current version')
+    .addHelpText('after', `\n${chalk.yellow('Example:')}\n  $ nodejs-quickstart init   ${chalk.gray('# Start the interactive setup')}\n`);
+
+program
+    .command('init')
+    .description('Initialize a new Node.js project')
+    .option('-n, --project-name <name>', 'Project name')
+    .option('-l, --language <language>', 'Language (JavaScript, TypeScript)')
+    .option('-a, --architecture <architecture>', 'Architecture (MVC, Clean Architecture)')
+    .option('--view-engine <view>', 'View Engine (None, EJS, Pug) - MVC only')
+    .option('-d, --database <database>', 'Database (MySQL, PostgreSQL)')
+    .option('--db-name <name>', 'Database name')
+    .option('-c, --communication <communication>', 'Communication (REST APIs, GraphQL, Kafka)')
+    .option('--ci-provider <provider>', 'CI/CD Provider (None, GitHub Actions, Jenkins, GitLab CI)')
+    .option('--include-security', 'Include Enterprise Security Hardening')
+    .option('--caching <type>', 'Caching Layer (None/Redis)')
+    .action(async (options) => {
+        // Fix for Commander camelCase conversion
+        if (options.ciProvider) {
+            options.ciProvider = options.ciProvider;
+        }
+
+        console.log(chalk.blue('Welcome to the Node.js Quickstart Generator!'));
+
+        try {
+            const answers = await getProjectDetails(options);
+            console.log(chalk.blue(`\n🚀 Preparing to generate ${chalk.bold(answers.projectName)} (${answers.architecture})...`));
+            
+            console.log(chalk.yellow('\nGenerating project files...'));
+            await generateProject(answers);
+
+            console.log(chalk.green('\n✔ Project generated successfully!'));
+            
+            console.log(chalk.magenta('\n🚀 Project is AI-Ready!'));
+            console.log(chalk.magenta('-----------------------------------------'));
+            console.log(chalk.magenta('🤖 We detected you are using AI tools.'));
+            console.log(chalk.magenta(`📍 Use Cursor? We've configured '.cursorrules' for you.`));
+            console.log(chalk.magenta(`📍 Use ChatGPT/Gemini? Check the 'prompts/' folder for Agent Skills.`));
+            console.log(chalk.magenta('-----------------------------------------'));
+
+            let manualStartInstructions = `\n${chalk.yellow('Development:')}\n  cd ${answers.projectName}\n  npm install`;
+            
+            const needsInfrastructure = answers.database !== 'None' || answers.caching === 'Redis' || answers.communication === 'Kafka';
+            
+            if (needsInfrastructure) {
+                let servicesToStart = '';
+                if (answers.database === 'MongoDB') servicesToStart += ' db';
+                else if (answers.database !== 'None') servicesToStart += ' db flyway';
+                if (answers.caching === 'Redis') servicesToStart += ' redis';
+                if (answers.communication === 'Kafka') servicesToStart += ' kafka';
+                
+                manualStartInstructions += `\n  docker-compose up -d${servicesToStart}  # Start infrastructure first\n  npm run dev`;
+            } else {
+                manualStartInstructions += `\n  npm run dev`;
+            }
+            
+            console.log(chalk.cyan(`\nNext steps:\n  cd ${answers.projectName}\n  npm install\n  docker-compose up\n-----------------------${manualStartInstructions}\n\n${chalk.yellow('Production (PM2):')}\n  npm run build\n  npm run deploy\n  npx pm2 logs`));
+
+            console.log(chalk.yellow(`\n⭐ If this tool saved you 5 minutes, please give us a star on GitHub: ${chalk.underline('https://github.com/paudang/nodejs-quickstart-structure')}`));
+
+        } catch (error) {
+            if (error.name === 'ExitPromptError') {
+                console.log(chalk.yellow('\n\n👋 Goodbye! Setup cancelled.'));
+                process.exit(0);
+            }
+            console.error(chalk.red('Error generating project:'), error);
+            process.exit(1);
+        }
+    });
+
+program.parse(process.argv);
+
+if (!process.argv.slice(2).length) {
+    program.outputHelp();
+}

package/lib/generator.js

@@ -132,7 +132,7 @@ export const generateProject = async (config) => {
       2. git init
       3. npm install
       4. npm run prepare      (To setup Husky hooks)
-      5. docker-compose up -d (To start DB/Infrastructure)
+      5. docker-compose up -d${config.database !== 'None' ? ' db' : ''}${config.caching === 'Redis' ? ' redis' : ''}${config.communication === 'Kafka' ? ' kafka' : ''} (To start DB/Infrastructure)
       6. npm run dev          (To start development server)
       7. npm test             (To run tests)
     `);

package/lib/modules/caching-setup.js

@@ -1,73 +1,76 @@
-import fs from 'fs-extra';
-import path from 'path';
-import ejs from 'ejs';
-
-export const setupCaching = async (templatesDir, targetDir, config) => {
-    const { caching, language, architecture } = config;
-    if (!caching || caching === 'None') return;
-
-    if (caching === 'Redis' || caching === 'Memory Cache') {
-        const langExt = language === 'TypeScript' ? 'ts' : 'js';
-        const clientObj = caching === 'Redis' 
-            ? (language === 'TypeScript' ? 'redisClient.ts' : 'redisClient.js')
-            : (language === 'TypeScript' ? 'memoryCache.ts' : 'memoryCache.js');
-        const cacheSource = path.join(templatesDir, 'common', 'caching', langExt, `${clientObj}.ejs`);
-        
-        let cacheTarget;
-        let loggerPath;
-
-        if (architecture === 'MVC') {
-            await fs.ensureDir(path.join(targetDir, 'src/config'));
-            cacheTarget = path.join(targetDir, 'src/config', clientObj);
-            loggerPath = language === 'TypeScript' ? '@/utils/logger' : '../utils/logger';
-        } else {
-            // Clean Architecture
-            await fs.ensureDir(path.join(targetDir, 'src/infrastructure/caching'));
-            cacheTarget = path.join(targetDir, 'src/infrastructure/caching', clientObj);
-            loggerPath = language === 'TypeScript' ? '@/infrastructure/log/logger' : '../log/logger';
-
-            // Overwrite UseCase with Caching Enabled
-            const useCaseName = language === 'TypeScript' ? 'getAllUsers.ts' : 'GetAllUsers.js';
-            const useCaseSource = path.join(templatesDir, 'common', 'caching', 'clean', langExt, `${useCaseName}.ejs`);
-            
-            // Both TS and JS templates use 'usecases' directory
-            const useCaseTargetDir = path.join(targetDir, 'src/usecases');
-            await fs.ensureDir(useCaseTargetDir); 
-            
-            if (await fs.pathExists(useCaseSource)) {
-                const ucContent = await fs.readFile(useCaseSource, 'utf-8');
-                const renderedUc = ejs.render(ucContent, { caching });
-                await fs.writeFile(path.join(useCaseTargetDir, useCaseName), renderedUc);
-            }
-
-            // Also Overwrite CreateUser with Caching (Invalidation) Enabled
-            const createUserParams = language === 'TypeScript' ? { name: 'createUser.ts', src: 'createUser.ts.ejs' } : { name: 'CreateUser.js', src: 'CreateUser.js.ejs' };
-            const createUserSource = path.join(templatesDir, 'common', 'caching', 'clean', langExt, createUserParams.src);
-
-            if (await fs.pathExists(createUserSource)) {
-                const createUserContent = await fs.readFile(createUserSource, 'utf-8');
-                const renderedCreateUser = ejs.render(createUserContent, { caching });
-                await fs.writeFile(path.join(useCaseTargetDir, createUserParams.name), renderedCreateUser);
-            }
-        }
-
-        if (await fs.pathExists(cacheSource)) {
-            const cacheTemplate = await fs.readFile(cacheSource, 'utf-8');
-            const content = ejs.render(cacheTemplate, { loggerPath });
-            await fs.writeFile(cacheTarget, content);
-
-            // Render Spec if exists
-            const specTemplateName = clientObj.replace(`.${langExt}`, `.spec.${langExt}.ejs`);
-            const specTemplateSource = path.join(templatesDir, 'common', 'caching', langExt, specTemplateName);
-            if (await fs.pathExists(specTemplateSource)) {
-                const specTemplate = await fs.readFile(specTemplateSource, 'utf-8');
-                const specLoggerPath = architecture === 'Clean Architecture' ? '@/infrastructure/log/logger' : '@/utils/logger';
-                const specRedisPath = architecture === 'Clean Architecture' ? '@/infrastructure/caching/redisClient' : '@/config/redisClient';
-                const specContent = ejs.render(specTemplate, { ...config, loggerPath: specLoggerPath, redisClientPath: specRedisPath });
-                const specTarget = cacheTarget.replace(`${path.sep}src${path.sep}`, `${path.sep}tests${path.sep}unit${path.sep}`).replace(`.${langExt}`, `.spec.${langExt}`);
-                await fs.ensureDir(path.dirname(specTarget));
-                await fs.writeFile(specTarget, specContent);
-            }
-        }
-    }
-};
+import fs from 'fs-extra';
+import path from 'path';
+import ejs from 'ejs';
+
+export const setupCaching = async (templatesDir, targetDir, config) => {
+    const { caching, language, architecture } = config;
+    if (!caching || caching === 'None') return;
+
+    if (caching === 'Redis' || caching === 'Memory Cache') {
+        const langExt = language === 'TypeScript' ? 'ts' : 'js';
+        const clientObj = caching === 'Redis' 
+            ? (language === 'TypeScript' ? 'redisClient.ts' : 'redisClient.js')
+            : (language === 'TypeScript' ? 'memoryCache.ts' : 'memoryCache.js');
+        const cacheSource = path.join(templatesDir, 'common', 'caching', langExt, `${clientObj}.ejs`);
+        
+        let cacheTarget;
+        let loggerPath;
+
+        if (architecture === 'MVC') {
+            await fs.ensureDir(path.join(targetDir, 'src/config'));
+            cacheTarget = path.join(targetDir, 'src/config', clientObj);
+            loggerPath = language === 'TypeScript' ? '@/utils/logger' : '../utils/logger';
+        } else {
+            // Clean Architecture
+            await fs.ensureDir(path.join(targetDir, 'src/infrastructure/caching'));
+            cacheTarget = path.join(targetDir, 'src/infrastructure/caching', clientObj);
+            loggerPath = language === 'TypeScript' ? '@/infrastructure/log/logger' : '../log/logger';
+
+            // Overwrite UseCases with Caching Enabled
+            const useCases = language === 'TypeScript' 
+                ? [
+                    { name: 'getAllUsers.ts', src: 'getAllUsers.ts.ejs' },
+                    { name: 'createUser.ts', src: 'createUser.ts.ejs' },
+                    { name: 'updateUser.ts', src: 'updateUser.ts.ejs' },
+                    { name: 'deleteUser.ts', src: 'deleteUser.ts.ejs' }
+                ]
+                : [
+                    { name: 'GetAllUsers.js', src: 'GetAllUsers.js.ejs' },
+                    { name: 'CreateUser.js', src: 'CreateUser.js.ejs' },
+                    { name: 'UpdateUser.js', src: 'UpdateUser.js.ejs' },
+                    { name: 'DeleteUser.js', src: 'DeleteUser.js.ejs' }
+                ];
+            
+            const useCaseTargetDir = path.join(targetDir, 'src/usecases');
+            await fs.ensureDir(useCaseTargetDir); 
+
+            for (const uc of useCases) {
+                const useCaseSource = path.join(templatesDir, 'common', 'caching', 'clean', langExt, uc.src);
+                if (await fs.pathExists(useCaseSource)) {
+                    const ucContent = await fs.readFile(useCaseSource, 'utf-8');
+                    const renderedUc = ejs.render(ucContent, { caching });
+                    await fs.writeFile(path.join(useCaseTargetDir, uc.name), renderedUc);
+                }
+            }
+        }
+
+        if (await fs.pathExists(cacheSource)) {
+            const cacheTemplate = await fs.readFile(cacheSource, 'utf-8');
+            const content = ejs.render(cacheTemplate, { loggerPath });
+            await fs.writeFile(cacheTarget, content);
+
+            // Render Spec if exists
+            const specTemplateName = clientObj.replace(`.${langExt}`, `.spec.${langExt}.ejs`);
+            const specTemplateSource = path.join(templatesDir, 'common', 'caching', langExt, specTemplateName);
+            if (await fs.pathExists(specTemplateSource)) {
+                const specTemplate = await fs.readFile(specTemplateSource, 'utf-8');
+                const specLoggerPath = architecture === 'Clean Architecture' ? '@/infrastructure/log/logger' : '@/utils/logger';
+                const specRedisPath = architecture === 'Clean Architecture' ? '@/infrastructure/caching/redisClient' : '@/config/redisClient';
+                const specContent = ejs.render(specTemplate, { ...config, loggerPath: specLoggerPath, redisClientPath: specRedisPath });
+                const specTarget = cacheTarget.replace(`${path.sep}src${path.sep}`, `${path.sep}tests${path.sep}unit${path.sep}`).replace(`.${langExt}`, `.spec.${langExt}`);
+                await fs.ensureDir(path.dirname(specTarget));
+                await fs.writeFile(specTarget, specContent);
+            }
+        }
+    }
+};

package/lib/modules/config-files.js

@@ -65,6 +65,10 @@ export const renderProfessionalConfig = async (templatesDir, targetDir, config)
         const sonarTemplate = await fs.readFile(path.join(templatesDir, 'common', 'sonar-project.properties.ejs'), 'utf-8');
         const sonarContent = ejs.render(sonarTemplate, { ...config });
         await fs.writeFile(path.join(targetDir, 'sonar-project.properties'), sonarContent);
+
+        const snykTemplate = await fs.readFile(path.join(templatesDir, 'common', '.snyk.ejs'), 'utf-8');
+        const snykContent = ejs.render(snykTemplate, { ...config });
+        await fs.writeFile(path.join(targetDir, '.snyk'), snykContent);
     }
 };