3 ms·
> Generally, it’s a good idea not to blindly install NPM packages. Given the nature of npm that is pretty hard to avoid.
by beardyw 2y ago
> Generally, it’s a good idea not to blindly install NPM packages.
Given the nature of npm that is pretty hard to avoid.
- 6mile 2y agoTransitive dependencies, yeah, but top-level dependencies that you are installing with npm i or via your manifest file are areas that you do control and can manage.