[homebrewer]

This will break many things that rely on installation scripts to work properly.

Use a better package manager that always disables installation scripts and lets you whitelist only those you absolutely need (like pnpm — which asks you post-install if any scripts were necessary, and reruns those you confirm).

Also avoid horrible tire fires like eslint that require several hundreds of unvetted dependencies. If you work alone and are disciplined, it's perfectly possible to write good TS without a linter. If not — use biomejs.dev (zero external dependencies) or `deno lint`.

Also node can easily be isolated from the rest of the system through bubblewrap/firejail:

  $ ls -a ~
  .  ..  code

https://wiki.archlinux.org/title/Bubblewrap

https://wiki.archlinux.org/title/Firejail

[christophilus]

Biome has a 5000+ line cargo.lock file. That’s a lot of dependencies. You just don’t see them directly in npm. This is the reason I dislike Rust and prefer Go. Rust is the JavaScript packaging culture applied to systems programming.