@tachles/starter

Official CLI tool for installing Tachles templates.

Installation

# Use directly with npx (recommended)
npx @tachles/starter <template-id>

# Or install globally
npm install -g @tachles/starter

Usage

Install a Template

# Basic usage
npx @tachles/starter <template-id>

# With specific version
npx @tachles/starter <template-id>@1.2.0

# Skip interactive prompts (use defaults)
npx @tachles/starter <template-id> -y

Options

• -y - Skip prompts and use default values
• --template-help - Display template information without installing

Security

This CLI includes comprehensive security measures to protect against malicious templates:

• ✅ Command Validation - Dangerous commands are blocked
• ✅ Package Validation - Malicious package names are rejected
• ✅ Rate Limiting - API abuse prevention
• ✅ Execution Limits - Prevents resource exhaustion
• ✅ Input Sanitization - All inputs are sanitized before execution

Security Features:

• Blocks dangerous patterns (rm -rf, shell injection, path traversal)
• Validates all packages and commands before execution
• Enforces timeouts on long-running operations
• Limits number of packages and commands per recipe

📖 Learn more: Security Documentation | Security Quick Reference

⚠️ Important: Always review templates from untrusted sources before installation.

What It Does

1. Fetches template configuration from Tachles platform
2. Prompts for setup options
3. Installs required packages
4. Runs initialization commands
5. Configures environment variables

Requirements

• Node.js 18 or higher
• npm, yarn, or pnpm

License

MIT