SamHasler
Will they actually warn the user if this happens? The npm blog post was unclear on this point:
https://blog.npmjs.org/post/189618601100/binary-planting-wit...
An Illustrated Guide to Useful Command Line Tools (wezm.net) https://news.ycombinator.com/item?id=21363121
And these older posts:
Less Commonly Used Unix Commands (danielmiessler.com) https://news.ycombinator.com/item?id=7252176 Seems to be down so here's a Wayback link: http://web.archive.org/web/20190311200305/https://danielmies...
Cool, but obscure Unix tools (kkovacs.eu) https://news.ycombinator.com/item?id=2567186
[edit] The SRI spec github project has an issue for shared cache [2] that seems to be coming to the consensus that there will not be a shared cache for SRI:
> "it seems rather unlikely that we can ever consider a shared cache"
[1] https://docs.google.com/document/d/1XJMm89oyd4lJ-LDQuy0CudzB...
[2] https://github.com/w3c/webappsec-subresource-integrity/issue...