7 ms·
I’ve never seen code that is downloaded run itself. Why not be the change you want to see in the world and run sudo or spawn your browser in a jail. Or download
by _3u10 6mo ago
I’ve never seen code that is downloaded run itself. Why not be the change you want to see in the world and run sudo or spawn your browser in a jail. Or download as another user.
- endymi0n 6mo agoWelcome to npm post-install scripts... https://docs.npmjs.com/cli/v11/using-npm/scripts https://docs.npmjs.com/cli/v11/using-npm/scripts
- johnny22 6mo agoglad pnpm disables those by default!
- skeeter2020 6mo agoPSA: if you're using (a newish release of) npm you should have something like this as a default, unless you've got good reasons not to: min-release-age=7 # days ignore-scripts=true
- okanat 6mo agoAnd Rust build scripts: https://doc.rust-lang.org/cargo/reference/build-scripts.html https://doc.rust-lang.org/cargo/reference/build-scripts.html