Really, another npm attack?
-
Really, another npm attack?
-
Really, another npm attack?
Let me guess, it's the pre- or postinstall script again
-
Really, another npm attack?
@volpeon Sometimes makes me wonder when npm will be thrown into a corner, but given stuff like yarn 3.x tossed out offline support it seems unlikely. -
Let me guess, it's the pre- or postinstall script again
@volpeon@icy.wyvern.rip good thing that bun blocks pre- and postinstall scripts by default
And even better that I don't really have a use for npm related software rn. My frontend for linstrom is still far away from becoming a priority -
@volpeon@icy.wyvern.rip good thing that bun blocks pre- and postinstall scripts by default
And even better that I don't really have a use for npm related software rn. My frontend for linstrom is still far away from becoming a priority@mstar pnpm blocks them as well by default. It's only npm which forces you to add
--ignore-scriptsto do the same, as if people wouldn't forget or get annoyed by it after a while