Re:Show HN: Safe-install – safer NPM installs with trusted b...
by gkiely on Tuesday May 12, 2026 @05:10PM
(#48114615)
Yeah, this is just for anyone using node on their local machine.
Enabling `ignore-scripts=true` protects you from almost all of the recent compromises `min-release-age=3` protects you from the rest. But you still typically need trusted dependency builds, which this script solves.
I hope that npm enables this by default in the future.
Enabling `ignore-scripts=true` protects you from almost all of the recent compromises `min-release-age=3` protects you from the rest. But you still typically need trusted dependency builds, which this script solves.
I hope that npm enables this by default in the future.