4 ms·
They have taken action as of very recently. The latest version [1] of npm warns when there are install scripts and tells you they will be disabled by default in
by bakkoting 4mo ago
They have taken action as of very recently. The latest version [1] of npm warns when there are install scripts and tells you they will be disabled by default in a future version, with a per-dependency opt in mechanism [2].
[1] https://github.com/npm/cli/releases/tag/v11.16.0 https://github.com/npm/cli/releases/tag/v11.16.0
[2] https://github.com/npm/rfcs/pull/868 https://github.com/npm/rfcs/pull/868
- hedora 4mo agoThis is way too little, way too late. To see what I mean, try actually packaging a cross-platform binary dependency in their ecosystem.
- bakkoting 4mo agoI have; you specify one optional dependency per platform and set the requirements in each package. It works fine. A bunch of packages do this (e.g. esbuild). I don't know what your complaint is or what you're asking for.