
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
nvm-node-version-checker
Advanced tools
A utility to ensure the correct Node.js version is being used with NVM. If the specified version is not installed, the script will automatically install it and set it as the active version.
This package is a simple script to check if the currently installed version of Node.js matches a specified version. If the version does not match, the script will automatically switch to the required version using NVM (Node Version Manager), and install it if necessary.
This is especially useful when working on multiple projects with different Node.js versions. For example, you can add a prestart script like prestart: nvm-node-version-checker 22.8.0 in your package.json to ensure the correct version of Node.js is used before starting the project.
Run npm i -D nvm-node-version-checker
Run by passing the desired Node.js version as an argument:
nvm-node-version-checker <version>
For example, to ensure you're using Node.js version 14.17.0, you can run:
nvm-node-version-checker 14.17.0
$ nvm-node-version-checker 14.17.0
Current Node.js version (v12.22.0) is not 14.17.0.
nvm is installed, proceeding with version change...
Installing Node.js version 14.17.0 via nvm...
Switching to Node.js version 14.17.0 via nvm...
Node.js version loaded successfully.
Process completed, ready to go!
This project is licensed under the MIT License.
FAQs
A utility to ensure the correct Node.js version is being used with NVM. If the specified version is not installed, the script will automatically install it and set it as the active version.
We found that nvm-node-version-checker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.