you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 6 months ago (1 child)

I think npm allows installation scripts which do make this worse, as a package can run arbitrary command at install time.

  • source
  • parent
  • hideshow 1 child comment