Home Explore Bookmarks Inbox Collections Profile

Recent Search

Command Palette

Search for a command to run...

Command Palette

Search for a command to run...

Home Explore Bookmarks

Inbox Collections Profile

Show HN: DepsGuard – one command to harden NPM/pnpm/yarn/bun/uv configs — Blankdot

github.com2 months ago

Show HN: DepsGuard – one command to harden NPM/pnpm/yarn/bun/uv configs

Show HN: DepsGuard – one command to harden NPM/pnpm/yarn/bun/uv configs

I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up…

Visit github.com

No discussion yet. Be the first to share your thoughts!