A production-grade build tool with a Rust-native core. Sub-100ms HMR, native Module Federation, 19 framework adapters, and an 8-command security pipeline — all in one tool.
$ lunx create my-app --template react --ts✓ created my-app (react + ts)$ lunx dev⚡ LUNX v1.2.0 Core ready▶ Bundler Rolldown + Oxc➜ http://localhost:5173✓ ready
No configuration plugins. No adapter juggling. Everything you need ships in the box.
Rolldown bundles and Oxc compiles TypeScript and JSX, both in Rust. LightningCSS processes styles. One engine for dev, build, libraries and meta-frameworks.
Save to visible in the browser in ~50 ms on a small app and ~180 ms on a 2,000-component app. Component state preserved across hot reloads.
Zero-config adapters for React, Vue, Svelte, Angular, Next.js, Nuxt, Astro, SvelteKit, Remix, Qwik, Solid, Tauri, Electron and more.
8 built-in commands: secret scanning, CVE detection (OSV), SBOM generation (CycloneDX 1.5), SRI injection, CSP generation.
Native MFE host/remote orchestration across frameworks. Singleton React enforcement prevents duplicate hook context errors.
An unchanged project skips the build (~150 ms). Framework compiler output is cached per file, so only changed components recompile.
Lunx auto-detects your framework from package.json.
Three commands. Any framework. Production-ready from day one.
Interactive picker — choose framework, TypeScript, Tailwind
Dev server starts in <40ms with sub-100ms HMR
Security scan → minify → brotli compress → SRI inject
8 commands ship with Lunx. No plugins. No extra setup. Runs automatically before writing to dist/.
lunx security auditAll checks. Exit 1 on any violation. CI-ready gate.
lunx security scanScans for AWS keys, tokens, Stripe secrets, JWTs.
lunx security cveOSV CVE database. GHSA IDs + CVSS scores.
lunx security sbomCycloneDX 1.5 SBOM. Required by EO 14028.
lunx security headersStrict CSP + SHA-384 SRI for every asset.
lunx security fixAuto-upgrade vulnerable deps. Shows diff first.
lunx security pluginsAudit plugin sandbox permissions.
lunx security reportHTML/JSON security report scored out of 100.