how about requiring some kind of interaction if they want to run an install scri... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		_betty_ 3 months ago \| parent \| context \| favorite \| on: Pnpm has a new setting to stave off supply chain a... how about requiring some kind of interaction if they want to run an install script?

jsheard 3 months ago [–]

Pnpm already did that: https://github.com/pnpm/pnpm/releases/tag/v10.0.0

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact