First of all, I am pretty certain that the majority of javascript developers runs a MacBook when they have the choice. Second, no I don't think that "I get some

First of all, I am pretty certain that the majority of javascript developers runs a MacBook when they have the choice. Second, no I don't think that "I get something wrong". It's not my fault that people use MacOS and don't have a decent package manager (although I hear dood things about homebrew, it's nowhere near rpm/DNF, afaik). It's also not my fault that people that do have a decent package manager don't contribute enough to get tools like volta packaged. Still, I can warn about the stupid idea to execute random she'll scripts from the internet for a "convenient small recipe". Even for that I get flak and attempts to justify the behavior. So no, I don't feel obliged at all to solve their problems. This vector will be exploited some day and it will be embarrassing for some people. Essentially, I think that people are lazy regarding these things and don't want to think about what they are doing with their systems. If I had an idea how to make things comfortable like this and still be safe and secure, I would sell it. But I don't really see a way to solve this except for moving the code to a trusted channel with a dedicated approval process.