Show HN: Safe-install – safer NPM installs with trusted build dependencies
In light of the ongoing npm supply chain compromises, I built safe-install:https://www.npmjs.com/package/@gkiely/safe-installIt brings a couple of protections I wanted from npm but are not built in.Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build/install scripts:https://bun.com/docs/guides/install/trustedIt also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` set...
Original Source
Read the full article at Npmjs →KhanList aggregates and links to publicly available news content. We do not host full articles from third-party sources. Always verify important information with original sources.