I packaged my go-to Node.js/TypeScript backend setup into a boilerplate

Every time I started a new backend project, I rebuilt the same things: JWT auth, CSRF protection,...