3 ms·
That just seems worse than what npm/yarn have. Despite Node's flaws, at least those have a hash check on the downloaded package against what's in the lock file.
by colejohnson66 5y ago
That just seems worse than what npm/yarn have. Despite Node's flaws, at least those have a hash check on the downloaded package against what's in the lock file.
EDIT: I was wrong. See @spoiler's reply.
- spoiler 5y agoSo does Deno: https://deno.land/manual/linking_to_external_code/integrity_checking https://deno.land/manual/linking_to_external_code/integrity_... It's not part of a package manager, because there isn't one, though.
- colejohnson66 5y agoAh. I stand corrected.