News for hackers. Stuff that matters.

A comment on Show HN: Safe-install – safer NPM installs with trusted build dependencies.

Re:Show HN: Safe-install – safer NPM installs with trusted b... by jaen on Tuesday May 12, 2026 @02:35PM (#48112393)
but... why not just use pnpm? It's generally a straightforward migration.

It has dependency cooldowns, build scripts disabled by default, and the setting you mentioned.

[ Parent | on HN ]
Re:Show HN: Safe-install – safer NPM installs with trusted b... by gkiely on Tuesday May 12, 2026 @05:21PM (#48114782)
The simplest reason might be that it's not the default so people use npm out of habit.

Personally, I use volta and switch between node versions in different projects, so I prefer to just use npm.

[ Parent | on HN ]