3 ms·
I haven't dabbled in Node yet; my main source of hesitation was I've been told npm doesn't cryptographically sign packages. If npm as a package manager is a sel
by sarciszewski 12y ago
I haven't dabbled in Node yet; my main source of hesitation was I've been told npm doesn't cryptographically sign packages. If npm as a package manager is a selling point, I would hope this has been corrected (or had been all along).
Otherwise, enjoy your MITM trojans.
- wcummings 12y agoSo then you can't host a mirror?
- sarciszewski 12y agoSure. But if anyone wanted to use your mirror, how would they know you didn't make changes to the base package without crypto? :)