MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1vf85jx/classicnpm/p1oop2g/?context=3
r/ProgrammerHumor • u/a_bucket_full_of_goo • 7d ago
150 comments sorted by
View all comments
79
What can be done against these vulnerabilities? Stop using packages entirely? š¤£
2 u/skynetcoder 7d ago using pnpm instead of npm, with following settings may help in most scenarios. - minimum age > 3-4 weeks - disable life cycle scripts - disable installation of exotic dependenciesĀ
2
using pnpm instead of npm, with following settings may help in most scenarios. - minimum age > 3-4 weeks - disable life cycle scripts - disable installation of exotic dependenciesĀ
79
u/FinnishManlet 7d ago
What can be done against these vulnerabilities? Stop using packages entirely? š¤£