Post

pnpm@pnpm.io

pnpm can block lifecycle scripts of dependencies during installation. This is an opt-in feature though. Should we block them by default? github.com/orgs/pnpm/di...

github.comShould we block lifecycle script of dependencies during installation? · pnpm · Discussion #8918There was recently an incident with rspack, where it was published with a postinstall script that contained malware. Such incidents happen from time to time, so it could be a good idea to stop runn...