
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
[](https://www.npmjs.com/package/ph-cmd) [](LICENSE) [](CONTRIBUTIN
A powerful command-line interface tool for Powerhouse DAO that streamlines project management, dependency handling, and environment configuration. This CLI serves as an intelligent wrapper around ph-cli, providing seamless command forwarding and context-aware execution.
ph-cli# Using npm
npm install -g ph-cmd --legacy-peer-deps
# Using yarn
yarn global add ph-cmd
# Using pnpm
pnpm add -g ph-cmd
After installation, ph-cmd creates a default project in your home directory under .ph/. This serves as a fallback context when no other project context is found. The default project comes with basic Powerhouse configurations and can be customized using the ph setup-globals command.
The CLI automatically determines the project context by:
powerhouse.config.json file in the current directorypowerhouse.config.json# Initialize a new project
ph init my-project
# Initialize in interactive mode
ph init -i
# Initialize with specific version
ph init -v v1.0.0
# Initialize using development version
ph init --dev
# Initialize with specific package manager
ph init --package-manager pnpm
-p, --project: Name of the project-i, --interactive: Run the command in interactive mode-v, --version: Specify development version to use (defaults to "main")--dev: Use "development" version of the boilerplate--staging: Use "development" version of the boilerplate--package-manager <packageManager>: Force package manager to use# Switch to latest environment
ph use latest
# Switch to development environment
ph use dev
# Switch to production environment
ph use prod
# Switch to local environment with specific path
ph use local /path/to/local/env
# Use specific package manager
ph use latest --package-manager pnpm
--package-manager <packageManager>: Force package manager to use--debug: Show additional logs# Update dependencies based on package.json ranges
ph update
# Force update to latest dev version
ph update --force dev
# Force update to latest stable version
ph update --force prod
# Force update to latest version (same as prod)
ph update --force latest
# Update using specific package manager
ph update --package-manager pnpm
# Update with debug information
ph update --debug
--force <env>: Force update to latest available version for the environment specified (dev, prod, latest)--package-manager <packageManager>: Force package manager to use--debug: Show additional logs# Set up global configurations
ph setup-globals
# Set up with debug information
ph setup-globals --debug
--debug: Show additional logsMost commands support these global options:
--verbose: Enable debug mode--package-manager <manager>: Force the use of a specific package manager--debug: Show additional debug logs# Initialize a new project with npm
ph init my-project --package-manager npm
# Set up global configurations
ph setup-globals
# Switch to development environment
ph use dev
# Update to latest stable version
ph update --force prod
# Update with specific package manager
ph update --package-manager pnpm
Command not found
ph-cmd is installed globallyProject context not found
powerhouse.config.jsonPackage manager conflicts
--package-manager flag to specify the correct managerEnable debug mode to get detailed information about command execution:
ph <command> --debug
We welcome contributions! Please see our Contributing Guidelines for details on:
This project is licensed under the terms specified in the LICENSE file.
For support, please:
FAQs
[](https://www.npmjs.com/package/ph-cmd) [](LICENSE) [](CONTRIBUTIN
We found that ph-cmd demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.