> That seems a bit excessive to sandbox a command that > really just downloads arbitrary code you are going to > execute immediately afterwards anyways? I d

> That seems a bit excessive to sandbox a command that > really just downloads arbitrary code you are going to > execute immediately afterwards anyways? I don't want to stereotype, but this logic is exactly why javascript supply chain is in the mess its in.