
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
smart-install-packages
Advanced tools
🚀 Smart Install CLI — Auto-detect your package manager, fix Node.js version mismatches, clean caches, and safely install dependencies.
A cross-platform intelligent CLI that automatically detects your project’s package manager, fixes Node.js version mismatches, cleans caches, and installs dependencies safely — even handling NVM version switches automatically.
Smart Install CLI detects your environment, selects the right package manager, cleans old lock files, ensures Node.js compatibility, and performs safe installations automatically.
npm, yarn, pnpm, bun)node_modules and lock files before install--doctor and --fix commands for quick repairnpm install -g smart-install-packages
# or
yarn global add smart-install-packages
smart-install
Smart Install will:
nvm)node_modules and lock filesSmart Install CLI
========================================
Current directory: C:\Projects\MyApp
CLI location: C:\Users\KZ\AppData\Roaming\npm\node_modules\smart-install-packages\bin
----------------------------------------
Initializing Smart Install...
Using package manager: YARN
Cleaning project files...
Running: yarn install
Detected Node mismatch — switching to Node 18.12.0...
Node v18.12.0 activated successfully.
Re-running installation...
Installation finished successfully!
| Flag | Description |
|---|---|
--clean-only | Remove node_modules and lockfiles only |
--force | Force reinstall dependencies |
--manager <name> | Use specific manager (npm, yarn, pnpm, bun) |
--debug | Show detailed logs |
--auto-relaunch | Auto-relaunch after Node switch |
--skip-switch | Skip Node version switching |
--status | Show current Node and engine compatibility |
--fix | Fix Node and manager issues before install |
--doctor | Diagnose Node/NVM/network environment |
--requirements | Show project requirements before installing |
--keep-terminal-open | Keep terminal open after relaunch |
--list-flags | Display all supported flags |
--help | Show help menu |
smart-install --clean-only
smart-install --force
smart-install --manager npm
smart-install --doctor
smart-install --fix
smart-install --requirements
smart-install --status
Smart Install integrates directly with VS Code through the companion extension:
Safe Packages Installation
This allows automatic installation and repair after cloning or switching branches — perfect for teams and CI/CD environments.
Smart Install gracefully handles:
If Node remains undetected after switching, run:
nvm use <version> smart-install --skip-switch
--doctor, --fix, --requirementsKerolos Zakaria
Portfolio • GitHub • npm • LinkedIn • VS Code Marketplace
MIT License © 2025 Kerolos Zakaria
FAQs
🚀 Smart Install CLI — Auto-detect your package manager, fix Node.js version mismatches, clean caches, and safely install dependencies.
We found that smart-install-packages demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.