undefined | Better HN

0 pointsblktiger7mo ago0 comments

Both NPM and Yarn have a way to disable install scripts which everyone should do if at all possible.

0 comments

1 comments · 1 top-level

Good point, but until many popular packages stop requiring install.sh to operate, you'll still need to allowlist some of them. That is built into the PNPM tooling, luckily :)

j / k navigate · click thread line to collapse