News for hackers. Stuff that matters.

A comment on Pnpm has a new setting to stave off supply chain attacks. Parent comment

Re:Pnpm has a new setting to stave off supply chain attacks by getcrunk on Thursday September 18, 2025 @08:36PM (#45296676)
I think it would be a no brainer for npm to offer this but idk why they haven’t
[ Parent | on HN ]
Re:Pnpm has a new setting to stave off supply chain attacks by phatfish on Friday September 19, 2025 @05:11AM (#45299571)
Probably because they would expose themselves legally? Not sure what the current situation is exactly, but I assume it's "at your own risk".
[ Parent | on HN ]