Hacker News new | ask | show | jobs
by vessenes 109 days ago
They forgot the single most important (bad) choice. Claude Code chooses npm. All the time. For everything. I noted the Claude Code lead dev has a full line in AGENTS.md/CLAUDE.md - "Use bun." Yes. Please. Please, use bun. I beg you.
2 comments
manbash 109 days ago
Yup don't expect up-to-date practices and always come with the expectations that your security will be flawed.
link
vessenes 109 days ago
gemini 3 deepthink + 5.3 xxhigh code audits catch a lot. Materially better than six months ago on the security side.

Also, yes. Still something that needs expert oversight.

link
darkstarsys 109 days ago
This is at the top of my ~/.claude/CLAUDE.md. Always use bun for web projects, uv for python.
link