open-index/open-npm huggingface dataset:
npm package: @tachles/starter
Description: CLI tool for installing Tachles templates
Author: Tachles
Latest version: 1.1.4

# @tachles/starter

Official CLI tool for installing Tachles templates.

## Installation

```bash
# Use directly with npx (recommended)
npx @tachles/starter <template-id>

# Or install globally
npm install -g @tachles/starter
```

## Usage

### Install a Template

```bash
# Basic usage
npx @tachles/starter <template-id>

# With specific version
npx @tachles/starter <template-id>@1.2.0

# Skip interactive prompts (use defaults)
npx @tachles/starter <template-id> -y
```

### Options

- `-y` - Skip prompts and use default values
- `--template-help` - Display template information without installing

## Security

This CLI includes comprehensive security measures to protect against malicious templates:

- ✅ **Command Validation** - Dangerous commands are blocked
- ✅ **Package Validation** - Malicious package names are rejected
- ✅ **Rate Limiting** - API abuse prevention
- ✅ **Execution Limits** - Prevents resource exhaustion
- ✅ **Input Sanitization** - All inputs are sanitized before execution

**Security Features:**
- Blocks dangerous patterns (`rm -rf`, shell injection, path traversal)
- Validates all packages and commands before execution
- Enforces timeouts on long-running operations
- Limits number of packages and commands per recipe

📖 **Learn more:** [Security Documentation](SECURITY.md) | [Security Quick Reference](SECURITY-QUICKSTART.md)

⚠️ **Important:** Always review templates from untrusted sources before installation.

## What It Does

1. Fetches template configuration from Tachles platform
2. Prompts for setup options
3. Installs required packages
4. Runs initialization commands
5. Configures environment variables

## Requirements

- Node.js 18 or higher
- npm, yarn, or pnpm

## License

MIT