Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Seriously. The only way to use it is to be a very religious person. You have to pray every single time you use it that your system doesn't become compromised.


But isn't this a problem with the ecosystem and not with the program? I mean, with yarn / etc., you have the same problems, don't you?


pnpm is generally safer and had the age delay much sooner than npm as well.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: