After fork
Template vs fork, Product Ready, and what to replace when the copy is your product.
Basilic stays the starter brand. New products use npx create-basilic@latest my-app. This page is also for GitHub Use this template or a fork. First run is still Product Ready. There is no rename script and no upgrade CLI.
Enable Template repository in GitHub settings so Use this template appears. Maintainers do that; agents cannot. Clone still works without the flag.
Generator vs template vs fork
npx create-basilic@latest— start a product. Independent git history; no docu app; no generator; local docs snapshot indocs/basilic/.- Use this template — start a product from GitHub. Includes the documentation app and generator until you remove them.
- Fork — contribute back to Basilic. Keep the upstream remote.
Run
Follow Getting Started: pnpm setup, db:start, pnpm reset, pnpm dev. Copied env sets ALLOW_TEST=true. Sign in with test@test.ai. Production refuses ALLOW_TEST.
The in-shell assistant is optional. Leave Anthropic unset so Ollama can be the free path, or set a real key. Do not use a truthy placeholder.
Replace when you ship as you
Keep Basilic names until you care. Then:
APP_NAME,WEB_APP_URL,EMAIL_FROMin API env- OAuth client ids (unconfigured providers stay 503)
.cursor/mcp.jsonVercel MCP URLs (mcp.vercel.com/gaboesquivel/basilic-*) — comment them out until you have your own projects- Mobile
appIdcom.blockmatic.basilic - DeepSec
githubUrlin.deepsec/deepsec.config.ts
Do not sweep every blockmatic docs URL. Those point at the upstream starter.
FIRST
Generated projects get an unfilled _first/PRODUCT.md and a retargeted _first/FIRST.md. Do not copy _first/basilic/ out — that overlay is this starter’s filled instance.
In this repository, _first/basilic/ stays the Basilic adoption pack. Specs stay /f-* from npx skills add blockmatic/first. Absent files beat empty stubs.
CI secrets
Lint, security.yml, package tests, and API unit/Scalar E2E run without org secrets. Fork PRs do not get upstream secrets.
- Chat E2E (
web-e2echat project) skips whenANTHROPIC_API_KEYis empty. Set the secret later if you want that project. - DeepSec already skips untrusted and fork PRs.
- Vercel and EAS are not Product Ready.
License
MIT. Root LICENSE. Keep the copyright notice in copies.