3 ms·
Postinstall hooks are a footgun. The bad part here is that people reviewing a PHP package may not even look closely at package.json.
by kspetkov79 4mo ago
Postinstall hooks are a footgun. The bad part here is that people reviewing a PHP package may not even look closely at package.json.