Show HN: Safe-install – safer NPM installs with trusted build dependencies https://ift.tt/ZgkJI3Y
Show HN: Safe-install – safer NPM installs with trusted build dependencies In light of the ongoing npm supply chain compromises, I built safe-install: https://ift.tt/6IAnrqp It brings a couple of protections I wanted from npm but are not built in. Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build/install scripts: https://ift.tt/smr84PT It also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` setting: https://ift.tt/1XMA25B... I was hoping npm would eventually add something like this, but it does not seem to be happening soon, so I made a small package for it. https://ift.tt/6IAnrqp May 12, 2026 at 01:30AM
Comments
Post a Comment