While it would be nice to be able to run `npm install` fearlessly, how much woul...

mort96 on July 12, 2018 | parent | context | favorite | on: Postmortem for Malicious Packages Published on Jul...

While it would be nice to be able to run `npm install` fearlessly, how much would it truly help? In almost all cases, the code downloaded from npm will be executed non-sandboxed anyways; that's probably the reason you installed the package after all.