Hacker News new | ask | show | jobs
by endymi0n 59 days ago
Welcome to npm post-install scripts... https://docs.npmjs.com/cli/v11/using-npm/scripts
2 comments

glad pnpm disables those by default!
PSA: if you're using (a newish release of) npm you should have something like this as a default, unless you've got good reasons not to:

min-release-age=7 # days

ignore-scripts=true