Dan Ramos 🇵🇹🇺🇸:verified: on nostr

Open in Damus

Dan Ramos 🇵🇹🇺🇸:verified:

@Dan Ramos 🇵🇹🇺🇸:verified: 1781159867

"💪 GitHub is tightening npm security.

In npm 12, "npm install" won't run dependency install scripts by default. Git and remote URL dependencies will need approval too.

The goal: cut supply chain risk from compromised packages.

See what's changing:
https://thehackernews.com/2026/06/github-to-disable-npm-install-scripts.html "

1

🗡️Sir Meachamus Prime · 7w

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq8xj6agamakfvn92y6pmxedupxg0n9xfxh4halhgra2lyg2jxfwusmkl4kz Sounds more like the goal is to shift responsibility to the customer. "You bypassed the install blocker. That makes it your fault not ours for writing bad software." Now if they were ...