5 ms·

I’ve never seen code that is downloaded run itself. Why not be the change you want to see in the world and run sudo or spawn your browser in a jail. Or download

• endymi0n 5mo ago
  Welcome to npm post-install scripts... https://docs.npmjs.com/cli/v11/using-npm/scripts https://docs.npmjs.com/cli/v11/using-npm/scripts
  • okanat 5mo ago
    And Rust build scripts: https://doc.rust-lang.org/cargo/reference/build-scripts.html https://doc.rust-lang.org/cargo/reference/build-scripts.html
  • johnny22 5mo ago
    glad pnpm disables those by default!
    • skeeter2020 5mo ago
      PSA: if you're using (a newish release of) npm you should have something like this as a default, unless you've got good reasons not to: min-release-age=7 # days ignore-scripts=true