npm RFC: Making Install Scripts Opt-In — A Deep Dive into What It Means for JavaScript Security
A landmark npm RFC proposes making install scripts opt-in by default. This deep-dive covers how the current system works, why it's dangerous, what the RFC proposes, the tradeoffs involved, and how you can protect yourself right now.
8 min readjavascriptnpmsecurity
