MCPxelMCPxel
Co-Pilot
Updated 24 days ago

basilic

Bblockmatic
0.0k
blockmatic/basilic
82
Agent Score

💡 Summary

Basilic is a TypeScript monorepo with a REST API architecture, optimized for development workflows.

🎯 Target Audience

TypeScript developersAPI developersDevOps engineersSoftware architectsTechnical project managers

🤖 AI Roast: “Powerful, but the setup might scare off the impatient.”

Security AnalysisMedium Risk

Risk: Medium. Review: shell/CLI command execution; outbound network access (SSRF, data egress); API keys/tokens handling and storage. Run with least privilege and audit before enabling in production.

Basilic

TypeScript monorepo with REST API architecture.

Requirements

  • Node.js: 22.x
  • pnpm: 10.28.0

Node.js Setup

Install and set Node.js 22 as default using nvm:

nvm install 22 && nvm alias default 22

Quick Start

pnpm install
pnpm dev

Commands

Development

  • pnpm dev - Start all apps in development mode (see Development Workflow)
  • pnpm build - Build all apps and packages
  • pnpm lint - Lint all code (Biome + ESLint)
  • pnpm format - Format all code (Biome)
  • pnpm checktypes - Type check all TypeScript
  • pnpm test - Run all tests
  • pnpm qa - Quality assurance: install dependencies, lint, type-check, build, and test everything

Development Workflow

Turborepo Setup

This monorepo uses Turborepo for task orchestration and caching. Turborepo provides:

  • Intelligent caching - Only rebuilds what changed
  • Parallel execution - Runs independent tasks simultaneously
  • Task dependencies - Ensures correct build order
  • Remote caching - Share cache across team and CI/CD

pnpm dev - Development Mode

The pnpm dev command starts all development servers with watch mode:

pnpm dev

This runs:

  • @repo/core - Watches for OpenAPI changes and regenerates API client
  • @repo/react - Watches for OpenAPI changes and regenerates React hooks, watches TypeScript for rebuilds
  • @repo/error - Watches TypeScript for rebuilds
  • @repo/utils - Watches TypeScript for rebuilds
  • @repo/fastify - Starts Fastify API server with OpenAPI generation watcher
  • @repo/next - Starts Next.js development server

Key Features:

  • Watch mode - All packages automatically rebuild when source files change
  • OpenAPI regeneration - core and react packages watch for OpenAPI spec changes and regenerate clients
  • Hot reload - Next.js and Fastify support hot module replacement

pnpm qa - Quality Assurance

The pnpm qa command runs a complete quality check:

pnpm qa

This executes:

  1. pnpm i - Install/update dependencies
  2. pnpm lint:fix - Auto-fix linting issues (ESLint + Biome)
  3. turbo run checktypes build test - Type-check, build, and test all packages (excluding contracts)

Use Cases:

  • Before committing changes
  • Before opening a pull request
  • In CI/CD pipelines
  • When verifying the entire codebase

Running Individual Apps

You can run individual apps directly, but remember to build dependencies first:

# Build required packages
pnpm build --filter=@repo/core --filter=@repo/react --filter=@repo/error --filter=@repo/utils

# Then run the app
cd apps/next
pnpm dev

See individual app READMEs (e.g., apps/next/README.md) for app-specific instructions.

Security

  • pnpm secrets:scan:staged - Scan staged files for secrets (gitleaks)
  • pnpm secrets:scan - Scan entire repository for secrets (gitleaks)
  • pnpm deps:osv - Scan dependencies for vulnerabilities (OSV Scanner)
  • pnpm deps:audit - Run pnpm audit for dependency vulnerabilities

CI/CD Workflows

GitHub Actions workflows automate quality checks:

Lint Workflow (.github/workflows/lint.yml)

Runs on all pull requests to ensure code quality:

  • Executes pnpm lint (Biome + ESLint)
  • Catches linting errors before merge
  • Can be manually triggered via workflow_dispatch

Security Workflow (.github/workflows/security.yml)

Runs on all pull requests and pushes to main:

  • Secret scanning - Scans repository with gitleaks and TruffleHog
  • Dependency scanning - Checks for vulnerabilities with OSV Scanner and pnpm audit
  • Git history scan - Scans entire git history for exposed secrets
  • All checks must pass for CI to succeed

See Security Guide for complete details.

Structure

  • apps/ - Applications (API, Web, Docs)
  • packages/ - Shared packages (core, react, ui, utils)
  • devtools/ - Shared development tooling (eslint, react, typescript configs)

Documentation

Full documentation: https://basilic-docs.vercel.app/docs

Get Started

Core Concepts

Guides

Cursor Setup

Deep Dives

5-Dim Analysis
Clarity8/10
Novelty7/10
Utility9/10
Completeness8/10
Maintainability9/10
Pros & Cons

Pros

  • Supports modern development practices.
  • Efficient task orchestration with Turborepo.
  • Comprehensive quality assurance workflows.

Cons

  • Requires familiarity with monorepo structure.
  • Dependency on specific Node.js version.
  • Initial setup may be complex for newcomers.

Related Skills

openai-agents-js

A
toolCo-Pilot
84/ 100

“Powerful, but the setup might scare off the impatient.”

View Analysis

mastra

A
toolCode Lib
84/ 100

“It's the Swiss Army knife for AI agents, but you'll need a manual to figure out which blade is for slicing LLMs and which one is for opening a stubborn workflow.”

View Analysis

inferred-types

B
toolCo-Pilot
78/ 100

“It's like a Swiss Army knife for TypeScript, but with fewer blades and more type safety.”

View Analysis

Disclaimer: This content is sourced from GitHub open source projects for display and rating purposes only.

Copyright belongs to the original author blockmatic.