dario-cli

npm registry proxy for the DARIO Orchestrator installer.

TL;DR

npx dario-cli              # trial install
npx dario-cli --key DARIO-XXXX-XXXX-XXXX-PRO   # licensed install
npx dario-cli --help       # see all installer options

What this package is (and is not)

This package is a thin proxy. It does one thing:

npx dario-cli [...args]
        │
        ▼
spawn: npx github:bardapraiacaraiva/dario-orchestrator-installer [...same args]

That's it. No logic, no telemetry, no arg rewriting. It just spawns the upstream installer with the arguments you passed.

Why this proxy exists

The official DARIO installer is hosted at github.com/bardapraiacaraiva/dario-orchestrator-installer and is invoked as npx github:bardapraiacaraiva/dario-orchestrator-installer.

That npx github:user/repo pattern is correctly flagged by AI security tools (Claude, ChatGPT, Snyk, Socket.dev) as resembling a supply-chain attack vector — even when legitimate. The pattern is genuinely common in malware distribution.

This package is published to the npm registry under the name dario-cli, so customers can run

npx dario-cli

which security tools recognize as a normal npm-registered package (immutable versioning, audit-trail, registry vetting). It then forwards transparently to the real installer.

Disclosure

DARIO is an independent project by Barda Praia Caraiva (dario.work). It is NOT affiliated with, endorsed by, or supported by Anthropic. The "DARIO" name is an acronym, not a reference to Dario Amodei or any Anthropic product.

See DISCLAIMER.md for the full statement.

Usage

The proxy forwards everything except two flags it handles itself:

| Flag | Handled by | Behavior | |---|---|---| | --proxy-version or -pV | proxy | Shows proxy version, does NOT call upstream | | --proxy-help or -pH | proxy | Shows proxy help, does NOT call upstream | | anything else | upstream installer | Forwarded unchanged |

Common upstream commands (passed through):

# Trial install (no key required, 7 days)
npx dario-cli

# VIP install (paid license key)
npx dario-cli --key DARIO-XXXX-XXXX-XXXX-PRO

# Verify existing installation
npx dario-cli --check

# Upgrade an existing installation
npx dario-cli --upgrade

# Migrate pre-v12.4.1 nested layout installs
npx dario-cli --fix-layout

# Show upstream installer help
npx dario-cli --help

# Show installer version
npx dario-cli --version

For the full installer documentation, see the upstream repo: https://github.com/bardapraiacaraiva/dario-orchestrator-installer.

Verifying this proxy is what it claims

Before running, you can verify the proxy code yourself:

1. Source on GitHub: https://github.com/bardapraiacaraiva/dario-cli/blob/main/bin/dario-install.js — ~80 lines total, no dependencies beyond Node stdlib.
2. No external network calls in the proxy itself — it only invokes npx -y github:... via child_process.spawn.
3. No environment variable harvesting — env: process.env passes your environment unchanged to the child process.
4. No file writes by the proxy — all install actions are the upstream installer's responsibility.

Run with --proxy-help to see proxy-only help without invoking the upstream:

npx dario-cli --proxy-help

Requirements

• Node.js >= 18 (for the proxy)
• The upstream installer's requirements (Python >= 3.11, git) once forwarded

License

Proprietary. See LICENSE.

Support

• Documentation: dario.work/docs
• Issues: github.com/bardapraiacaraiva/dario-cli/issues
• Email: [email protected]