5 ms·
Installing one of these packages doesn't execute the script though, you'd have to do that yourself. (It could be updated to do that though, which is terrifying.
by zwily 11y ago
Installing one of these packages doesn't execute the script though, you'd have to do that yourself. (It could be updated to do that though, which is terrifying.)
- zamalek 11y agoI wonder if the author is possibly proving a point. Regardless, it seems as though having an NPM user set up on your CI server is a big risk.
- NathanKP 11y agoYou have to have an NPM user setup on your CI server in order to use private NPM packages, which some companies do instead of hosting their own onsite NPM.
- SlashmanX 11y agoWell there is pre/post install scripts that can be run. Not saying this package does that, but it is very easy to run a script just after installing from npm