News for hackers. Stuff that matters.
Re:Pnpm has a new setting to stave off supply chain attacks by chowells on Thursday September 18, 2025 @02:38PM (#45293371)
I mean, it's my #1 experience using npm. I never once have used `npm install` and had a result other than it changing the lockfile. Maybe you want to blame this on the tools I used, but I followed the exact installation instructions of the project I was working on. If it's that common to get it "wrong", it's the tool that is wrong.

There are no comments on this comment yet.