3 ms·
For many, installing something with npm is still easier. It chooses the right binary for your OS/architecture, puts it on your PATH, and streamlines upgrades.
by varenc 7mo ago
For many, installing something with npm is still easier. It chooses the right binary for your OS/architecture, puts it on your PATH, and streamlines upgrades.
Their Github releases provides the binaries, as well as a `curl ... | sh` install method and a guide to use github releases attestation which I liked.
- freakynit 7mo agoHmm, that's right... thanks..
- krzyk 7mo agoI feel better with `curl ... | sh` than with npm. npm suggests projects written in js, which is not something I'm comfortable. It is nice to see that this is not JS, but Rust.
- varenc 7mo agoAgreed! The `curl ... | sh` is sketchy, but it's more obviously a security risk and easier to inspect. With install hooks, `npm install ...` also allows arbitrary code execution when you run it, but this is less obvious.