Hacker News new | ask | show | jobs
by pnappa 271 days ago
Yeah, LavaMoat (https://github.com/LavaMoat/LavaMoat). Dependencies are pinned with capabilities, and scripts are disabled by default.