5 ms·

Then don't use it. Just don't presume to tell me if I can or can't.

• dgellow 3mo ago
  Given that has an impact over the whole industry, I will for sure tell you that patching on install SHOULD NOT be a thing. Up to you to run your own post install script yourself
  • gear54rus 3mo ago
    [flagged]
    • ramon156 3mo ago
      Elaborate on the "behave properly". What is properly here?
    • prophesi 3mo ago
      Or maybe just add a script in package.json to run whatever patch-package does (eg, "install:patch": "npm install && patch-package") instead of whitelisting every package to have that power.
• port11 3mo ago
  You’re free to allow scripts as per the linked docs for NPM 12. But the vast majority of us will appreciate the reduced attack surface.
• jeremyjh 3mo ago
  TFA explains how this works, and how to opt out.