[monlockandkey]

Any practical tips for hardened security when programming? Don't want to be exposed to npm/pip/cargo installing password/browser cookie stealers. What worries me is the little to no isolation between the dev environment and the rest of the OS for day to day use.

[christophilus]

Use as few deps as possible, and run your projects in containers, or even better, VMs.

[neya]

That doesn't guarantee anything still, that's the beauty of Javascript ;)