reddit • r/node
[RFC] Make install scripts opt-in ┬╖ npm/rfcs
[RFC] Make install scripts opt-in ┬╖ npm/rfcs. [RFC] Make install scripts opt-in ┬╖ npm/rfcs
Developers struggle with npm’s default automatic execution of install scripts, which can introduce security risks and flaky builds. ScriptGuard gives teams granular control by sandboxing and requiring explicit approval for each install script, ensuring safer, faster, and predictable package installs.