2 ms·
Oh dear, I didn't realise this. I knew that GitHub Release archives could have different files in them - for example, see the xz backdoor recently - but I didn'
by Sophira 2y ago
Oh dear, I didn't realise this. I knew that GitHub Release archives could have different files in them - for example, see the xz backdoor recently - but I didn't realise that npm would use those by default.
- from-nibly 2y agoIt doesn't use the releases. It just bundles up whatever files you tell it to.