Skip to content
The Nexus
TECHNOLOGYMay 12 · 00:30 UTCHACKER NEWSgkiely

Show HN: Safe-install – safer NPM installs with trusted build dependencies

The safe-install package provides safer NPM installs with trusted build dependencies, allowing users to disable install scripts by default and define a list of allowed dependencies. It also supports blocking exotic sub-dependencies. The package was created in response to ongoing npm supply chain compromises.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned
Spot something wrong with this article?Report a problem →
Forward this