4 ms·

I like this pip metaphor. If we had required `--trust-remote-code` for every `npm install` we could have avoided left-pad and most of the software supply chain

by rfoo 3y ago

I like this pip metaphor. If we had required `--trust-remote-code` for every `npm install` we could have avoided left-pad and most of the software supply chain drama in the past years.

SahAssar 3y ago
How would that have avoided left-pad? Do you just mean that people would have been discouraged from pulling in so many dependencies?
_ea1k 3y ago
I think that would just teach people to type --trust-remote-code fast.