Re:NPM debug and chalk packages compromised
by rimunroe on Monday September 08, 2025 @03:54PM
(#45173111)
npm ci should be much faster in CI as it can install dependencies directly from the lockfile rather than having to go through the whole dependency resolution algorithm. In CI environments you don't have to wait to delete a potentially large pre-existing node_modules directory since you should be starting fresh each time anyway.
[ Parent
| on HN ]